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NEWSPAPER 


Haunted by the Past 


The survival plan that Comdex show organizers 
came up with earlior this year - to recast the 
event as one strictly focused on corporate IT - 
may have been brilliant. But few IT professionals 
appear to have gotten the message, and lingering 


Ta 


perceptions of Comdex as an unwieldy, circuslike 
showcase of gadgets and consumer goods are 


ee 


ONLINE EXCLUSIVE: Your peers weigh in on Comdex: 
@ QuickLink 42527 www.computerworld.com 


Shippers Face Big IT Security 
Costs but See Future Savings | 


The right mix of tools 


BY DAN VERTON 
NEW YORK 


Private port operators and 


W ouldi boost efficiency 


| ings, shipping industry repre- 
| sentatives said last week. 


The debate over whether 


| the government or the private 
| sector should bear the costs 


shipping companies in the U.S. | 


will likely be expected to pay 

for the bulk of the multibil- 

lion-dollar effort the govern- 

ment says is necessary to pro- 

tect the nation’s global supply 

chain from terrorist attacks. 
But they may find 

that’s not such a 

heavy burden. The 

right mix of IT-en- 

abled security mea- 

sures could turn the 

short-term expense 

into long-term sav- 


associated with IT security 
upgrades for the nation’s mar- 
itime ports — which security 
experts say represent the 


biggest vulnerability to terror- | 


ist attacks involving weapons 
of mass destruction — was a 
central theme of last week’s 
. Maritime Security 
Expo here. 
; A frequently cited 
§ document at the 
event was a recent 
United Nations re- 
port that put the 
global shipping in- 
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dustry’s cost for security this 
year at close to $2 billion. And 
that doesn’t include the poten- 
tial costs of retrofitting the ex- 
| isting worldwide fleet of 12 
million shipping containers or 
building new “smart” contain- 


ers from scratch. 


Most shipping industry offi- 


| cials agreed that the private | 
Shippers, page 16 | 


| 2003 conference here 
| cautioned that so- 
called information life- 





| Better interoperability 
| afirst step, users say 


BY LUCAS MEARIAN 

ORLANDO 

IT managers are intrigued by 
new technology designed to 
automatically manage data 
from creation to deletion. But 
many users at last week’s Stor- 
age Networking World Fall 


cycle management ap- 
proaches will require 


| years of development. 


To make the new concept 
work, conference attendees 


| said, vendors will have to inte- 


grate storage devices, manage- 
ment tools and business appli 


| cations and develop more ro- 
| bust policy-based engines that 


can dictate how, where and for 
how long data gets stored. 


Also at SNW 
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‘Information Life-cycle Tools 
Appealing but Remain Distant 


Some users said vendors 
should first concentrate on 
making their existing storage 
products more interoperable. 
James Medeiros, informa- 
tion systems and services 
manager at United Parcel Ser- 
vice Inc., said he has yet to be 
convinced that Atlanta-based 
UPS should spend money on 
unproven life-cycle manage- 
ment technologies in an effort 
to make its storage 
management opera- 
tions more efficient. 
“As much as I’m out 
to eliminate multiven- 
dor tool sets and drive 
more policy-based manage- 
ment, I only have 25 storage 
[technicians] managing that 
infrastructure, compared to 
4,700 IT workers overall,” 
Medeiros said. “I'll take a beat- 
ing on cost before I take a 
beating on reliability.” 
Life-cycle Tools, page 57 
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VENDORS ARE RUSHING TO 

offer a variety of products, 

from content checkers 

to transaction trackers, in 

order to help companies prevent leaks 
of confidential information and comply 
with new privacy laws. PAGE 25 
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The dawn of a new PC era. 


For the last decade, every processor chip in every personal computer in 
the world has been based on 32-bit architecture. It was the best technology 
we had. Until today. Introducing the revolutionary PowerPC G5 processor, the 

world’s first 64-bit processor for personal computers. 


Before now, a chip this formidable 


L 


could only be found in the world’s 
fastest servers and supercomputers. Which is precisely 
where the G5 chip came from. Developed by IBM and 
Apple, the G5’s DNA is from the core of IBM's highest- 
performance, 64-bit POWER4 processor. But just as 
impressive as the G5's pedigree is how it’s manufactured. In IBM's (and the 
world’s) most advanced semiconductor facility, the G5’s 12-inch 
silicon wafers are untouched by human hands 


as robots guide them through 500 





The 64-bit processor. 


processing steps, creating 58 million transistors and connecting them with 
over 1000' of copper wire that’s less than 1/800th the width of a human hair. 
The new PowerPC G5 has a 1-gigahertz frontside bus’ that moves data 


in and out of the processor almost twice as fast as the = “? 


= competition, removing a key bottleneck that 


limits performance. And it can support more 
than 200 in-flight instructions at a time -71% more than 
the 32-bit Pentium 4. Perhaps most importantly, the 
G5's 64-bit architecture can address dramatically more 
memory — over 4 billion times more than 32-bit chips 
— so that systems built around the G5 can shatter the 4-gigabyte memory 
ceiling that limits every other PC on earth. The 64-bit PowerPC G5. 
It’s not just a new chip. It’s the next chapter in 


personal computing. 
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| How do you become the fastest growing 50 billion- 
dollar retailer in history with over 200 new stores 
| opening this year alone? With unparalleled vision and 
. | absolute clarity. That’s why The Home Depot® chooses 
Samsung — the world’s leading manufacturer of TFT-LCD displays. 
And now Samsung’s commitment to the big picture continues 
with the innovative display technology found in the new SyncMaster 
192T, allowing your future to appear just as bright. 


Add vision. Add possibility. Add Samsung. 
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in the Technology section: Enterprise 
service bus technology is still in its in- 
fancy, but some pioneering companies 
are using it to solve integration prob- 
lems and save money. Page 30 








SPECIAL REPORT 


Comdex organizers, pinning the 
show's survival on its new corpo- 
rate IT focus, haven't managed 
to get the refocused message 
out to IT professionals. 

Story begins on Page 8. 


Longhorn spurs developer in- 
terest, but Microsoft isn’t say- 
ing when the next version of 
Windows will be ready. 


Hewlett-Packard tools enable 
Con Edison Communications 
to unify management of its 
metropolitan-area network. 


Offshore outsourcing raises 
numerous risks, so IT man- 
agers need to protect their 
companies through due dili- 
gence, say contract experts. 


California’s wildfires test the 
disaster readiness of compa- 
nies threatened by the flames 
and power outages. 


MCI contracts are being ex- 
tended by some federal agen- 
cies, despite the carrier’s 
GSA-mandated suspension. 


Goodyear hits $100 million 
bump due to a faulty account- 
ing implementation system. 


Sarbanes-Oxley documenta- 
tion requirements are leading 
corporate execs to push for IT 
certification audits. 


57 Bank of America eyes IT 
cost reductions as part of its 
planned acquisition of Fleet- 
Boston Financial. 


TECHNOLOGY 


25 Keeping Secrets. As privacy 
regulations proliferate, ven- 
dors have responded with a 
broad range of compliance 
monitoring and enforcement 
tools. 


34 QuickStudy: WebDAV. Web- 
based Distributed Authoring 
and Versioning allows users 
to collaborate over the Inter- 
net by editing and managing 
files remotely. 


36 Security Manager’s Journal: 
Rogue Access Point Leads to 
Embarrassment. Mathias 
Thurman must identify the lo- 
cation of an unauthorized ac- 
cess point after an outside 
vendor discovers its presence 
and uses it to get into the cor- 
porate network. 


MANAGEMENT 





41 Serving 
Many Masters. 
CIO Joel 
Gruber of 
RouteOne, an 
automotive ‘ 
joint venture, Boy 
has to balance GRUBER 
the IT needs 
of the competitive partners 
with the needs of the new 
company — with four CIOs 
looking over his shoulder. 


46 Book Excerpt: Get Sales 
Chiefs on Your Side. Sales 
managers can make or break a 
CRM or sales force automa- 
tion project, so it’s important 
to make sure they’re enthusi- 
astic supporters, writes 
Michael Gentle. 


Developing IT Skills ‘To Go’ 


In the Management section: McDonald’s 
Alice Rowland is spearheading a national 
IT apprenticeship program that com- 

bines classroom learning with on-the-job 


training. Page 44 





OPINIONS 


10 On the Mark: Mark Hall finds 
a vendor whose software can 
reportedly measure whether 
outsourcing makes sense. 


20 Maryfran Johnson warns that a 
surge in the enforcement of pri- 
vacy laws means IT managers 
had better get serious about 
leading compliance work. 


20 Pimm Fox usually dismisses 
screen-scraping technology, 
but he has found a user and an 
application where it fits. 


Thornton A. May reports on 
what some of the nation’s top 
CIOs believe are the best rea- 
sons for reorganizing your IT 
department. 


38 Paul A. Strassmann says it’s 
tempting to point a finger at 
Microsoft for desktop securi- 
ty woes, but CIOs should take 
some of the blame. 


48 Paul Glen thinks the clients of 
IT departments are seeking 
expert counsel and a good ex- 
perience, not a fast transac- 
tion or beautiful code. 


58 Frankly Speaking: Frank 
Hayes recognizes that pure- 
technology jobs are leaving 
U.S. IT shops. But he says 
there’s still plenty of IT work 
to be done for the business. 





DEPARTMENTS/RESOURCES 
At Deadline Briefs coe 
News Briefs ........ 

WAR Ss hc tasta wanes 21 
Fr Cameet Sco 042 veces ace cae 
Company Index................. 56 
How to Contact CW 

Shark Tank 


ONLINE 


WWW.COMPUTERWORLD.COM 


@ Take this week's QuickPoll at www.computerworld.com. 


‘OMPUTERWORLD.COM Ni 


Four Ways to Secure Your 

Company on a Shoestring Budget 
SECURITY: Even without a lot of funds for se- 
curity, there are low-cost steps you can take 


to reduce risk. @ QuickLink 42442 
Enhance WLAN Security 


MOBILE/WIRELESS: Two consultants and a 
UCLA professor offer advice on fending off 
intruders with a smart antenna system and a 
layered architecture. € QuickLink 42456 


How to Build an RSS Feed 
DEVELOPMENT: In this book excerpt from 
Apache, MySQL, and PHP Weekend Crash 
Course, the author shows how to use PHP for 
Web content syndication. @ QuickLink 42396 


ONLINE 
DEPARTMENTS 


Breaking News 
@ Quicklink ai510 


Newsletter 
Subscriptions 

© QuickLink 21430 
Knowledge Centers 

© QuickLink a2570 
The Online Store 

© QuickLink a2420 


What’s a QuickLink? 
Throughout each issue of 
Computerworld, you'll 

see five-digit QuickLink codes 

pointing to related content on 
our Web site. Also, at the end of 
each story, a Quicklink to that 
story online facilitates sharing it 
with colleagues. Just enter any 
of those codes into the Quick- 

Link box, which is at the top of 

every page on our site. 





8 COMPUTERWORLD November 3, 2003 


NEWS 


Comdex’s Past May Be Its 
Biggest Obstacle to Survival 


Organizers fail to get message across 
that show has been refocused for IT 





BY TODD R. WEISS 
HE CORPORATE IT 
community appears 
not to have gotten 
the message that 
Comdex/Fall is being recast as 
a scaled-down event focusing 
exclusively on IT profession- 
als. And that’s bad 
news for show orga- 
nizers who are pinning 
the event’s survival on 
the new direction. 

A Computerworld poll of 
several dozen IT professionals 
last week indicated that re- 
spondents still perceive 
Comdex as being too big, too 
glitzy and too out of touch 
with the needs of corporate IT 
to warrant their attendance. 
Many were not aware of the 
following developments: 

# MediaLive International 
Inc., which was known as 
Key3Media Group Inc. until 
emerging from Chapter ll 
bankruptcy earlier this year, 
unveiled plans to completely 
refocus the event in July 
{QuickLink 40163]. 

w Instead of the approxi- 
mately 200,000 attendees and 


| 2,000 exhibitors hawking any- 


thing with a battery that 
thronged to Comdex in its 
mid-’90s heyday, about 50,000 
qualified or paid attendees 
and some 500 corporate-IT- 


| focused exhibitors are expect- 
| ed this year. 


Eric Faurot, who be- 
came general manager 
of Comdex in April, said 
he expects that it will 
take time for the small- 

er, more tightly focused event 
to reconnect with some past 


| exhibitors and attendees. 


“T can’t build a Comdex that 
has every company involved 


| and has everything I want in it 
| all in the first year,” Faurot 
| said. “We know it’s Step 1.” 


Comments from IT profes- 
sionals polled last week 
demonstrated how far Faurot 
has to go lure them back. 

“The value of Comdex in 


| the data management world is 


very limited. It’s hard to get 
things done at a show that 


| big,” said Bob Leo, director of 


data management and admin- 


| istration at transportation ser- 


vices company Landstar Sys- 





WHO’S GOING? 


Many top vendors, like users, are 
waiting to see if Comdex organiz 
ers. deliver on their pron 

strictly target IT profe 

The few key players exhibiting 
include the following: 

a Ld 


Despite the fact that Linux will be 
acore theme of the event 


OR OSes 


tem Inc. in Jacksonville, Fla. 
Michael McClaskey, CIO at 
IT consulting vendor Perot 
Systems Corp. in Plano, Texas, 
echoed that assessment. 
“Comdex has become an ex- 
tremely large and unfocused 


| event, and it seems that in- 
| creasingly little of significance 


for the enterprise really gets 
announced there,” McClaskey 
said. “Our finite conference 
dollars are better spent in 
much more focused forums.” 

Carlos Recalde, executive 
director of technology at fi- 
nancial services company 
KPMG LLP in Montvale, N.J., 
said he hasn’t attended 


Past Attendees Might Return if Comdex Gets Serious 


If the Comdex Fall 2003 show 
lives up to its billing as a smaller, 
IT-focused show without all the 
hoopla and gadgetry of the past, 
it just might accomplish its goal 
of luring back former attendees 
who gave up on it. 

“If they truly do that, then | 
think | would be interested and 
would consider attending,” said 
Dan Agronow, vice president of 
technology at Atlanta-based 
Weather.com. “It became a 
showcase for glitz. It was, how 
many trinkets can you collect? It 
lost some of the value it had be- 


cause of focusing so much on 
the showmanship of the prod- 
ucts.” 

Also, he said, the 
crowds had become 
so large that “it was 
very hard to try to pin 
the vendors down to 
get specific informa- 
tion.” 

Other former 
Comdex attendees 
agreed, saying they 
would be willing to 
give the show another 
chance if it makes 


ANN STATES 


FXO) SNS 
eyecare ve) 
much “showman- 
iT MN Ya oe oe 


good on its new promises. 

“We may take a look at them 
next year to see if they're more 
T-oriented,” said 
Chris Collins, manag- 
er of enterprise archi- 
tecture at grocery 
store chain Ahold 
USA, a division of 
Netherlands-based 
Royal Ahold Group. 
“Initially, when 
Comdex first started 
up... they were 
more consumer- 
driven than IT-driven. 


Comdex for at least five years. 
“] think the value of this show 
was gone a while ago,” he said. 
Faurot acknowledged that 
the marketing challenge is a 
formidable one, and that the 


| effort so far has yielded little 


to brag about. 


No More ‘Fluff’ 

“It’s like anything that has a 
tremendously powerful brand 
— what’s associated with that 
brand can be difficult to 
change in the minds of some,” 
Faurot said. “It’s... been 
around for 23 years” and be- 
come saturated with consumer 


| electronics and peripheral 


products. “There wasn’t any 


| real, central focus,” Faurot said. | 


“So what ended up surfacing 


to the top was the gadgets.” 


But no more. 
“Obviously, that stuff is not 


driving the IT industry right 


now,” and it won’t be at this 
year’s show, Faurot said. 
“We've stripped out ... all the 


| stuff that was fluff.” 


Among the new features of 


| this year’s show, which is be- 


ing held again at the Las Vegas 
Convention Center Nov. 16-20, 


| are seven IT tracks being or- 


ganized to help attendees 





learn more about specific 


| didn’t realize they were chang- 
ing the thrust of the show.” 

Joe Poole, technical support 
manager at Reading, Pa.-based 
Boscov's Department Stores, 
said his company stopped send- 
ing employees to shows like 
Comdex stopped several years 
ago when IT budgets were tight- 
ened amid a flagging economy. 
But if the show becomes more 
compelling and useful for IT - 
and if his budget opens up - it 
could again be a possible desti- 
nation, Poole said. “It's just a 
matter of how the whole econo- 
my turns up next year.” 

- Todd R. Weiss 





www.computerworld.com 


technologies, including open- 
source and Linux, on-demand 
computing and security. 

But changing the percep- 
tions of IT professionals isn’t 
the only challenge faced by 
show organizers. 

The list of exhibitors so far 
has a few big names, including 
Microsoft Corp., AT&T Wire- 
less Services Inc., and Dell 
Inc. But most are smaller com- 
panies. The vendor vacuum is 
highlighted by the fact that, 
although Linux will be a key 
theme, none of the major Lin- 
ux vendors, including Red Hat 
Inc. and SUSE Linux AG, will 
have booths at the show. 

Faurot acknowledged the 
missing pieces but said many 
companies, including Linux 
vendors, never saw them- 
selves fitting into the Comdex 
of old and still haven’t recog- 
nized the new focus. More- 
over, he said, many companies 
that didn’t sign up for booths 
are nonetheless participating 
in forums and meeting with 
customers off the show floor. 

The hope is that such non- 
exhibiting participants as chip 
maker Advanced Micro De- 
vices Inc., IBM, Sun Microsys- 
tems Inc., Cisco Systems Inc. 
and Oracle Corp. will find this 
year’s show to be useful and 
sign up to exhibit next year, 
Faurot said. “There’s a lot of 
stuff going on behind the 
scenes, but we still need to get 
them on the [exhibit] floor, 
and that’s our goal moving for- 
ward,” he said. “We have to 
prove ourselves. 

Comdex is striving to 
change just as a competitor 
tries to unseat it as the pre- 
mier IT show. Across town, 
Jupitermedia Corp. will hold 
its first Computer Digital 
Expo/Enterprise IT Week 
show at the Mandalay Bay 
Convention Center on the 
same days as Comdex. That 
show has signed up keynote 
speakers from IBM and 
Hewlett-Packard Co., among 
other companies. 

“That’s just fine. I think 
competition is good,” Faurot 
said. “I think [Jupitermedia] 
saw us as a company in bank- 
ruptcy, and maybe they 
thought there was an opportu- 
nity.” @ 42508 
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Programmers Welcome Longhorn Demos, but the Wait Continues 


Developers would 
like software to be 
ready sooner 


| in the second half of 2004. But 


make a beta version available 


| company executives declined 


| to provide details about when 


—_—_—_____—_———— | they expect Longhorn to be 


BY CAROL SLIWA 
LOS ANGELES 
Programmers expressed keen 
interest in many of the code- 
named technologies that Mi- 
crosoft Corp. demonstrated 
last week at its Professional 
Developers Conference here. 
But the enthusi- 
asm that many 
shared about the 
Avalon graphics 
subsystem, the Indi- 
go communication 
technologies for building ad- 
vanced Web services, and the 
WinFS storage model was tem- 
pered by the realization that it 
will be some time before they 
see the Windows operating 
system, code-named Long- 
horn, that will feature them. 
“It’s interesting, but I think 
it’s going to be a long way 
out,” said Christopher Mc- 
Carthy, a Chicago-based se- 
nior systems engineer at Bank 
of America Corp. “This is too 
far out for us to evaluate.” 
Microsoft handed out a de- 
veloper preview version of 
Longhorn and pledged to 


| 
| 
| 
| 
| 
| 
| 


| past events they had shown 


| Pa.-based technical specialist 


| 


| 


THE WHOLE STORY 


Visit our Application Devel- 
opment Knowledge Center 
@ QuickLink k1100 
www.computerworld.com 





completed, even though at 


slides projecting that Long- 
horn technologies could start 
to ship in 2005. 

Jim Mangione, a West Point, 


at Merck & Co., said he antici- 
pates that Indigo 
will help with inte- 
gration in the com- 
pany’s heteroge- 
neous environment, 
which includes 
Windows and .Net as well as 
Linux and Java. “I’m just hop- 


| ing it’s in a production-ready 
state soon,” he said. 


Jeremy Lehman, senior vice 
president and head of technol- 


| ogy at Thomson Financial in 
| New York, said his company 


foresees a major commercial 


| Opportunity with Indigo, even 


though it’s currently just 


| “slideware.” He said his com- 
| pany partners with Microsoft 


and other vendors to provide 


| information and technology to 


financial services customers, 


| and he hopes next year to be 


able to demonstrate products 


Cracking the Code Names 


LONGHORN: Next maior release 
of Windows operating system. 
Due: Undetermined, but not before 
2005. Beta expected in the second 
half of 2004. 


Windows applications; separates 
code from content, enabling 
designers and developers to collab- 
orate. Due: With Longhorn. 


WHIDBEY: Next release of Visual 
Studio .Net development tools. 
Due: 2004. 





that use Indigo for exchanging 
data via Web services. 
Lehman said proprietary 
middleware systems tend to 
work only with companies’ in- 
ternal systems, whereas Web 
services can be used on an in- 
ternal and external basis. He 
said he expects Indigo to help 
to ease integration, lower 
costs and reduce complexity. 
But Lehman is also cognizant 
of Indigo’s immaturity, and he 
said he expects to have to wait 


| for its successor to get rich 


functionality for transactions. 
Roy Schulte, an analyst at 


| Gartner Inc., explained that 


Indigo is a superset of Micro- 
soft’s Messaging Queuing (MS 
MQ) technology and its Com- 
ponent Object Model (COM), 
COM+, .Net remoting and 
Web services support. “Think 
of this as a simplification, a 
unification of communication 
middleware on behalf of Mi- 


| crosoft’s plan,” Schulte said. 


Indigo will enable develop- 


| ers to more easily deliver se- 


cure, reliable and transacted 
messages by including the 
“tricky” security code and oth- 
er plumbing code that nobody 
“would voluntarily likely want 
to do,” said John Shewchuk, an 
architect on the Indigo team. 
Microsoft currently delivers 


| some of those capabilities 


through its Web Services En- 


| hancement (WSE) too! kit, 

| and about half of Indigo is 

| WSE, according to Eric Rud- 
| der, Microsoft’s senior vice 


president of servers and tools. 


| But the Web services specifi- 


cations on which WSE is 
based are still being finalized. 


New graphics capabilities in | 


Avalon appeal to John Rob- 
bins, a Bloomfield, Conn.- 
based systems architect at 
Cigna Corp. He said the new 
Extensible Application Mark- 
up Language’s (XAML) ability 
to separate code from content 
will be helpful, because it will 
allow a graphics person to de- 
sign the interface and then 


| hand off the XAML file to a 


developer to create the code 
behind it. He also said XAML 
could be useful for working 
with third-party design tools. 





Microsoft Exec Shares Details 
About Longhorn and Indigo 


LOS ANGELES 

Eric Rudder, senior vice presi- 
dent of servers and tools at Mi- 
crosoft, spoke with Computer- 
world's Carol Sliwa last week 
about new technologies that the 
company detailed at its Profes- 
sional Developers Conference 
here. Excerpts from the inter- 
view follow: 


When will we see the 

new technologies that 
Microsoft demonstrat- 

ed here? | think more 
important than exactly 

when is that we've gone 

out of our way to share 

our thinking with the 
community and get 

feedback early. We take a bit of 
arisk. ... But | think I've been 
clear with my team certainly 
[that] I'd absolutely run the risk 
of disclosing too much rather 
than disclosing too little. 

We absolutely will deliver 
Yukon, the next version of SQL 
Server, and Whidbey, the next 
version of Visual Studio, shortly 
... in the second half of 2004. 
We think of that as together in 
the same wave, and Longhorn 
sometime after that. 


Microsoft recently listed 
Longhorn, the next major 
Windows release, for 2005 
and beyond. Is 2005 still a 
possibility? We're more fo- 
cused on building the right 
product with the right quality, 
and those things will determine 
our schedule. 


A Gartner analyst character- 


The new WinFS storage sys- | 
| will be universal data access 
| and better searching capabili- 


| tem was most interesting to 
' Luke Voss, a software engi- 
neer at the Jet Propulsion Lab- 

| oratory in Pasadena, Calif.He | 


said the lab currently uses a 

relational database to capture 
relationships between sets of 
data, but it makes more sense 


| to unify the framework with 


ized Indigo, the code name 
for communications technol- 
ogy for building advanced 
Web services, as an enter- 
prise service bus (ESB). Do 
you agree? We've showed 
[off] Indigo as the technology 
for our Web services runtime. | 
think people will build enterprise 
service bus strategies that en- 
compass a variety of 
technologies, and hope- 
fully it's Web-service- 
based. We can actually 
run over multiple trans- 
ports. So you might 
choose to run it over TCP 
or HTTP or your other 
messaging strategies like 
MS MQ or Tibco. | think 
you'll see a combination. 


Does Indigo include message- 
oriented middleware? Indigo is 
middleware in some sense. 


Will Indigo be competitive 
with message-oriented mid- 
dleware products? It can be 
complementary. 


Indigo is targeted for Long- 
horn. Will Microsoft make Indi- 
go available for Windows 
Server 2003? If the reaction 
from customers is great and they 
want Web services technology 
on 2003, it’s definitely something 
we'll consider. 


MORE COVERAGE 


To read more about ESB 
technology, turn to page 30. 
To read the ‘complete interview 
with Rudder, go online to 

© QuickLink 42531 
www.computerworld.com 


the file system. The benefit 


ties, he said. “I don’t think 


| WinFS will be something that 
| solves specific problems, but 


it will change the way we look 
at the problem,” he said. “Data 
will be more important than 


files.” @ 42511 
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CA Readies Suite 
Of Identity Tools 


Computer Associates Interna- 
tional Inc. said it’s combining six 
products from its eTrust security 
software line into a unified set of 
identity and access management 
tools. The plan, which follows 
similar moves by IBM and other 
rivals, will be detailed this week 
along with an upgrade of CA’s 
eTrust Admin software. New re- 
leases of the other tools are due 
to be announced in May. 


HP Stops Selling 
Its e3000 Systems 


Hewlett-Packard Co. ended sales 
of its HP e3000 midrange sys- 
tems on Oct. 31, completing a 
phaseout process that started 
two years ago. Some e3000 
users marked the occasion by 
holding informal “wakes” at bars 
and backyard barbecues. HP will 
continue to offer CPU upgrades 
and e3000 peripherals for the 
next 12 months and will support 
the system until the end of 2006. 


Problem Affects 


Antipiracy Tool 


Symantec Corp. said it’s investi- 
gating a problem that’s affecting 
an antipiracy tool built into its 
Norton AntiVirus 2004 desktop 
software. The tool is repeatedly 
prompting some users to re- 
enter product activation codes 
when they reboot their PCs, 
Symantec said. The Cupertino, 
Calif.-based company also an- 
nounced that it’s buying ON 
Technology Corp. in Waltham, 
Mass., for $100 million in cash. 


Palm Completes 
Purchase, Spin-off 


Palm Inc. completed its acquisi- 

tion of Handspring Inc. and spun 
off its PaimSource Inc. operating 
system unit into a separate com- 
pany. Milpitas, Calif.-based Palm 
also renamed itself palmOne Inc. 
as part of its deal with Mountain 
View, Calif.-based Handspring. 
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Outsourcing Deals Fail 


Half the 


ime... 


... because most companies lack data on how well internal operations 
stack up against so-called cheap, external competitors. Pointing to market 
research by Giga Information Group Inc. and others, Jason Schroedl, 
director of corporate marketing at newScale Inc., claims that more 
than 50% of IT outsourcing agreements fail for lack of comparative 
information. “You need to know how well your outsourcer stacks up 


against your internal offerings,” he says, 
or you increase the risk of having an out- 
sourcing deal collapse. For example, 
companies often discover that much of 
the money saved by sending work out- 
side is eaten up by the costs of managing 
the outsourcer relationship. Also com- 
mon is for the outsider to bungle the service 
quality. Arming yourself with apple-to-ap- 
ple cost comparisons and measurable 
service-level agreements 
can boost outsourcing suc- 
cess rates to higher than 
75%, Schroedl says. That’s 
because you might discover 
that the best and most cost-ef- 
fective work can be done inside 
the organization, so you out- 
source fewer tasks. Those 
metrics will be among the 
improvements in Foster City, 
Calif.-based newScale’s re- 
lease of RequestCenter 2004 
late this quarter. The up- 
grade, which comes packed 
with more than 500 built-in 
best practices for establish- 
ing and measuring a service 
offering, starts at $400 per 
user. ® Developers generally get 


If your smaller remote 
sites have data worth 
PLO RU On tM UCR CH) Lc 
CMU eRe Umar LCR Lt be 
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consider the new Retro- 
spect Disk-to-Disk edi- 
Pela) (3 
today for $299 from 
Dantz Development 
Corp. in Walnut Creek, 
OFT MLE AVE act tb 
larly backs up as much as 
300GB of data to a pair of 
low-cost hard drives. No 
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the short end of the services stick. Few ven- 
dors think about their needs. Oh, sure, 
there are tools, utilities and much more, 
but there’s little comparative infor- 
mation. Charles Stack, CEO of Flashline 
Inc. in Cleveland, thinks the lack is par- 
ticularly striking when it comes to open- 
source technology. “Developers need com- 
parative data between open-source and 
commercial products,” he says. So, with 
the release today of Flash- 
Pack for Open Source, Stack 
contends, you'll be able to 
see how much you can save 
by using, say, JBOD instead 
of WebSphere, or Linux in 
place of Windows or So- 
laris. You can also set up 
the software to track assets 
and publicize product sup- 
port processes. FlashPack 
requires the Flashline Reg- 
istry, which has broader 
functions for developers 
and managers and starts at 
$70,000. ® Crashing Win- 
dows systems may be less 
of a problem with Mi- 
crosoft’s recent operating 
system releases, but they’re 


‘Con Edison Unifies Network Management 
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by no means a thing of the past. And Bob 
Nolan, CEO of Raxco Software Inc. in 
Gaithersburg, Md., claims that Micro- 
soft’s System Restore feature “doesn’t re- 
store all your apps or data.” And in his 
opinion, using backup products is a time- 
consuming pain in the butt. Assuming you 
haven’t suffered a hard drive meltdown, Rax- 
co’s new FirstDefense ISR can restore the 
drive to a preproblem state from one of 10 
prior user-selected snapshots the soft- 
ware has taken and stored on the drive. 
Furthermore, FirstDefense lets you “an- 
chor” files or folders to it, so that their 
data is always kept current, even if the 
data has been updated after a snapshot. 
The software runs as a preboot operation, 
so a user can tell the utility to reboot toa 
state prior to the crash. The server version 
ships next week for $395, and a worksta- 


| tion release can be expected later this 


quarter for $49.95, ® Chat with Caroline 
Smith at Travelocity.com LP, a Fort Worth, 
Texas-based subsidiary of Sabre Inc., and 
you'll get a lesson or two in how to spend 
IT’s budget. The director of database mar- 
keting and CRM for the online travel ser- 
vice recounts how she shifted the compa- 
ny’s data warehouse work from Oracle to 
technology from Teradata Corp. in San 
Diego. “We were going to have to shell out 
more money with Teradata, and it would have 
cost us nothing to stay with Oracle,” she re- 
calls. Plus, she says, they had trained Ora- 
cle database administrators and had a suc- 
cessful implementation of Oracle for on- 
line transactions. Why shift these pricey 
gears? Simple. End-user business analysts 
would be able to develop profitable pro- 
grams gleaned from warehouse intelli- 
gence without needing constant adminis- 
trator help, she says. And they'd be able to 
construct queries of the warehouse not 
possible in Oracle. Smith’s conclusion: 
“The cost of things you can’t do is often 


| the most expensive.” Amen. @ 42491 


port system, which offers a 
set of telecommunications 
infrastructure management 





| BY MATT HAMBLEN 


Con Edison Communications 


| LLC last week began testing 


new management software 
from Hewlett-Packard Co. on 
the fiber-optic network it op- 
erates in the New York metro- 
politan area, with the goal of 
unifying management of all 
devices on the network. 
Orlando Hernandez, direc- 
tor of IT at the subsidiary of 
Consolidated Edison Inc. in 
New York, said he hopes to 
put the HP OpenView Net- 
work Node Manager software 


| into production this month. 


He added that officials at Con 
Edison Communications want 


| network administrators to be 
| able to monitor all 250 Ether- 


net elements on its metropoli- 
tan-area network from a single 
management console. 

Hernandez said the unified 
view should enable the admin- 
istrators to react more quickly 
when problems occur on the 
3-year-old commercial net- 
work, which has about 200 
business customers. 

By year’s end, Con Edison 





also plans to install a second 


| HP product called OpenView 


Operations. It will be used to 
automate management of the 
company’s back-office sys- 
tems, including LAN and 
WAN applications such as an 
Oracle database and Windows 
Active Directory services. 
Hernandez said the two HP 
applications are expected to 
cost about $100,000, including 
installation. Con Edison has 
already spent more than $1 
million to roll out HP’s Open- 
View TeMIP Operations Sup- 





capabilities, including fault 
management and service acti- 
vation tools. 

Network Node Manager 
will feed network alarms and 
fault information into the 
TeMIP software, according to 
Hernandez. It should also 
lessen the need for Con Edi- 
son’s IT staffers to write cus- 
tom software modules to con- 
figure new network devices. 
“Developer time is money, 
and it makes no sense to re- 
create the wheel,” he said. 


@ 42515 
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Offshore Risks Are Numerous, 
Say Those Who Craft Contracts 


Due-diligence process needed to ensure 
security measures, backup plan in place 


BY PATRICK THIBODEAU 
NEW YORK 
T MANAGERS who cut cor- 
ners in their offshore out- 
sourcing contracts may 
jeopardize their compa- 
nies’ security and intellectual 
property and could well un- 
dermine expected cost sav- 
ings, attorneys who negotiate 
these deals warned last week. 
The potential pitfalls are 
numerous, and companies 
can’t take anything for grant- 
ed. If an offshore provider says | 
it has a backup plan, for in- 
stance, don’t assume that it 
will work, said Marina Gra- 
cias, deputy general counsel at 
Providian Bancorp Services in 
San Francisco. 


“Tf all these backup plans 
are there, that’s great,” Gracias 


| told an American Conference 


Institute forum here last week. 


| “But have somebody test it.” 


Carefully outline the proc- 
ess for ordering changes to the 


| work being performed, and 
| stick to it, said Mark Gross- 


man, a Miami-based attorney 


| at Becker & Poliakoff PA. It’s 


easy for companies to lose 
track of change orders in mul- 
tiple e-mail exchanges with a 
vendor and end up with unex- 
pected bills. 

Find out how stable an out- 


sourcer’s workforce is, advised 


Dennis Sholl, CEO of Global 
Vantedge Inc., a Larkspur, 


| Calif., provider of credit ser- 


Calif. Wildfires Test Backup 
Readiness of IT Systems 


Many companies | 
fend off downtime | 


BY LINDA ROSENCRANCE 
The wildfires that ravaged 
California last week put the 
disaster preparedness of many 
companies’ IT systems to the 
test. Those able to report a 
passing grade were demon- 
strably relieved. 
For example, 
although fires in 
San Diego County 
caused widespread 
power outages and 
threatened its head- 
quarters, document conver- 
sion company ADCS Inc.’s IT 
systems kept the business up 
and running. | 
Cliff Rittel, director of IT at | 
Poway, Calif.-based ADCS, | 
credited his infrastructure 
power and cooling system 
from West Kingston, R.I.- 
based American Power Con- 


FIRE COVERAGE 


California's disaster response 
system got a workout 
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version Corp. (APC). 

Rittel said that even though 
the area experienced numer- 
ous power spikes and outages 
on Oct. 26, ADCS experienced 
no communications or server 
downtime because of its APC 
InfaStruXure power and cool- 
ing system. 

“Our Poway headquarters is 
our main network operations 
center for telecommunica- 
tions, mail system 
and VPN connec- 
tions worldwide, so 
the mission-critical 
uptime was para- 
mount,” he said. 

Rittel also said his compa- 
ny’s telecommunications sys- 
tems were unaffected because 
its service provider, AT&T 
Corp., had laid its fiber-optic 
cable underground. 

Meanwhile, Navy/Marine 
Corps Intranet (N/MCI) con- 
tractor Electronic Data Sys- 
tems Corp. temporarily trans- 





| vices. Managers at offshore 
service providers can quickly 


find work with another pro- 


| vider if they aren’t happy, said 


Sholl. So make sure your pro- 


| vider has a career advance- 


ment path in place for them, he 


| said. “Don’t just ask what their 
| attrition rate is,” he said. “Find 


out how they measure it.” 

A lot of the advice offered at 
the forum would apply to any 
outsourcing contract. But dif- 
fering legal standards and cul- 
tural norms can create uncer- 
tainties in offshore deals. The 
concept of time, for instance, 
doesn’t mean the same thing 
in all cultures. “When some- 
body says, ‘It will get done 
shortly, ... it could mean one 
day or a couple of years,” said 


| Bijesh Thakker, an attorney at 
| Thakker & Thakker in Banga- 


lore, India. 


ferred help desk services from 


| its facility in San Diego to Nor- 


folk, Va. 
Kevin Clarke, a spokesman 


for Plano, Texas-based EDS, 


said his company took the San 


| Diego facility off-line for about 
| 24 hours beginning the morn- 


ing of Oct. 27. “There was no 
interruption of service,” Clarke 
said. “We built the N/MCI in- 
frastructure to do just this.” 
Atlanta-based Cingular 
Wireless said in a statement 
issued Oct. 29 that less than 
1% of its cell towers in the San 


| Diego and Los Angeles areas 


were affected by the fires. 
“Service restoration efforts 


| have brought almost 80% of 








To protect themselves, com- 


| panies need to go through an 
| exhaustive due-diligence proc- 


ess and examine every possi- 
ble contingency, outsourcing 
experts and users advised. 
Companies moving work to 
an offshore provider can sig- 
nificantly increase costs if 
transition details aren’t spelled 
out, said Cliff Justice, manag- 
ing director at NealT Inc., a 
San Ramon, Calif.-based off- 
shore consulting firm. U.S. 
companies may run parallel IT 
processes before they’re com- 
fortable enough to hand off 


| the work. Get that transition 


wrong and “it will duplicate 
costs and create a situation 
where ROI is extended out 
years,” Justice said. 

Security is a major issue. 
Orrie Dinstein, senior counsel 
at a financial services firm 


the sites back online,” the 


| company said. “Those sites 


that have not been restored are 
in areas currently inaccessible 

due to safety concerns or have 

been destroyed and are being 


| rebuilt.” 


Cingular said it deployed 25 
backup generators to augment 


| commercial power losses at 


cell sites and deployed mobile 
wireless facilities. 

Laura Oberhelman, a 
spokeswoman for Atlanta- 


| based Cox Communications 


Inc., said the company’s net- 


| work had performed with 98% 


of its customers in the affected 


| areas, encountering no loss of 


service. @ 42480 
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Offshore 
Checklist 


» DETAIL service-level agreements 
and delivery requirements. 


® ARRANGE performance mea- 
surements, ongoing monitoring 
and provisions for audits. 


# ASSESS the vendor's work- 
force stability. 


® ASCERTAIN what customers 
your vendor has lost 


DETERMINE how your data 
is protected if your vendor is 
working with your competitors. 


@ STIPULATE security and 
background-check policies. 

® ENSURE compliance with 
all laws. 


® GET everything in writing. 


| that he requested not be iden- 
tified, said users need to con- 
sider how data is classified 
and what level of security and 
encryption is applied to it. Pe- 
riodic security checks, includ- 
ing penetration testing, are 
good practice, he said. 

It’s also important that user 
companies get consensus in- 
ternally and set clear objec- 
tives before signing an out- 
sourcing agreement. 

“You've got to be able to 
demonstrate your savings, and 
they have to be unambiguous,’ 
said Akiba Stern, an attorney 
at Shaw Pittman LLP in New 
York. Offshore agreements are 
“going to be sold to your man- 
| agement on the basis of costs,” 
Stern said. 

And companies have to con- 
sider all of the expenses: trav- 
el, management and telecom- 
munications costs, as well as 
the risk of additional future 
costs. “What happens if the 
privacy laws change again? Is 
that something that is priced 
into the deal?” asked Stern. 

Companies have to be cer- 
tain that they have nailed 
down all the terms before an 
outsourcing contract is signed. 

“Your greatest leverage is 
before you sign a deal,” said 
Mark Feingold, corporate 
counsel at Aventis Pharma- 
ceuticals Inc. in Bridgewater, 


NJ. @ 42504 
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Federal Agencies Extend Deals With MCI 


_NEWS 


Despite Its GSA-Mandated Suspension 


Some agencies say the extensions are 


temporary; senator seeks justifications 





BY MATT HAMBLEN AND 

DAN VERTON 

Several federal agencies re- 
cently extended network ser- 
vice contracts with MCI, and 
one awarded it a small new 
deal, despite a July decision by 
the U.S. General Services Ad- 
ministration (GSA) to suspend 
the company from competing 
for contracts. 

For example, the Defense 
Information Systems Agency 
(DISA) last week said it has 
renewed four contracts with 
MCI and added a new pact for 
an emergency telephone sys- 
tem. According to DISA, the 
total value of the extensions 
and the phone system contract 
is $117.9 million. 

Under federal acquisition 
rules, agencies can continue to 





, do business with suspended 


contractors if they determine 
that there are compelling rea- 
sons to do so, such as national 
security. But the moves by 
DISA, the Department of Jus- 
tice, the Social Security Ad- 
ministration and the Armed 
Forces Retirement Home have 
caught the attention of Sen. 
Susan Collins (R-Maine), 


| chairman of the Senate Gov- 


ernmental Affairs Committee. 
Collins has asked each 
agency by the end of this week 


| to provide details about all of 


the contracts they have initiat- 
ed or extended with MCI 
since the company’s debar- 
ment and to spell out their 


reasons for doing so. 


DISA spokeswoman Betsy 
Flood said the agency’s recent 


Goodyear Hits $100M 
Bump With ERP System 


Tire maker will 
have to restate 


BY MARC L. SONGINI 

Goodyear Tire & Rubber 

Co. last week said it’s still in- 
vestigating what went wrong 
with its financial systems and 
caused a major accounting 
blowout at the company. 

The Akron, Ohio-based tire 
maker added that it hasn’t set 
a firm target date for complet- 
ing a planned fix of the balky 
systems, which include a cor- 
porate accounting system 
based on SAP AG’s ERP soft- 
ware plus a set of older appli- 
cations that are used for inter- 
company billing. 

Goodyear on Oct. 22 dis- 
closed that it would have to 
restate its financial results 
back to 1998, partly because of 





financial errors resulting from 


| a faulty implementation of the 


accounting system. It also cit- 

ed processing malfunctions on 

the intercompany systems. 
One thing is certain: Good- 


| year will take a big financial 


hit as a result of the system 


| snafus. In a statement, the 

| company said it expects to 

| lower the net income it re- 

| ported during the restatement 


period by as much as $100 mil- 
lion. In addition, the company 
postponed the release of its 
results for this year’s third 
quarter (see chart). 

The SAP-based ERP system 
was installed in 1999 and runs 


| Goodyear’s core accounting 


functions. Meanwhile, the 
intercompany billing systems 
handle internal transactions 
on purchases of raw materials 
made centrally for use through- 
out the company’s global oper- 


| dealings with MCI 

| were necessary, but 
she declined to dis- 
close detailed rea- 

| sons. Flood said 

DISA officials noti- 

| fied the GSA about 
the four extensions 

| and the new Gov- 
ernment Emer- 

| gency Telephone 

| System (GETS) 

| contract, a one- 

| year deal worth 

| $1.7 million. 

| By far, the largest extension 

| awarded by DISA was the re- 

| newal of a contract for digital 

| satellite transmission services 

| in the Pacific Ocean that’s pro- 

| jected to be worth $80 million 

| during the next 12 months. 
However, Flood said a selec- 

| tion process is under way to 
find an alternative source for 

| those services. 

Fred Rao, chief of manage- 


System Fallout ff 


= Goodyear will restate its fi- 
nancial results for the years 
1998 through 2002 and for the 
first half of this year. 

= Up to $100 million in profits 
will be wiped off the company's 
books, although it said revenue 
won't be affected. 

= The scheduled announce- 
ment of Goodyear’s third- 
quarter results was delayed 
from Oct. 23 to mid-November. 


| ations, according to a Good- 
year spokesman. 
Goodyear declined to make 
any of its IT managers avail- 
| able to comment about the 
| matter. The company absolved 
| SAP’s software from any 


| blame, saying that the prob- 


lems stemmed from the way 
the applications were installed. 
“It’s important to note that 
we said the situation involved 
the implementation of the 
ERP [software] and did not say 


There’s 

no way in 
the world you 
can change 
your phones 
overnight. 
FRED RAO, CHIEF OF 
MANAGEMENT INFORMATION 


SYSTEMS, ARMED FORCES 
RETIREMENT HOME 


ment information 
systems at the 
Armed Forces 
Retirement 
Home, said that 
agency also is 
looking for a new 
service provider 
after giving MCI 
an extension of 
only 90 days ona 
4-year-old con- 
tract for 600 
voice communi- 
cations lines. 

Rao added that the exten- 
sion, which took effect Oct. 1, 
was needed because a con- 
tract with another vendor 
couldn’t be put into place 
quickly enough following 
MCI’s debarment. “There’s 
no way in the world you can 
change your phones over- 
night,” he said. 

The GSA suspended MCI, 
which is still officially known 


eeeeeccsees 


we had a problem with the 
software itself,” the Goodyear 
spokesman said. 

He added that company of- 
ficials currently are “identify- 
ing where the errors were” in 


| the ERP rollout and the inter- 


nal billing systems so that fix- 
es can be made and account- 
ing procedures improved. 
Goodyear got consulting 
help on the SAP project from 
PricewaterhouseCoopers and 
J.D. Power and Associates, ac- 


| cording to the tire maker’s 


spokesman. He said Goodyear 
isn’t contemplating any legal 


actions against the consulting 


firms at this point. 

Nor does Goodyear plan 
to make any management 
changes within its IT depart- 
ment pending the outcome of 
the ongoing internal review, 


| the spokesman said. In addi- 
| tion, the company has no 


plans to replace the affected 
systems with new ones. 
William Wohl, a spokesman 
for SAP America Inc. in New- 
town Square, Pa., said Good- 
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as WorldCom Inc., after deter- 
mining that the company had 
yet to adequately revamp its 
internal accounting controls 
and business ethics following 
the accounting scandal that 
forced it to seek bankruptcy 
protection [QuickLink 40319]. 
MCI spokeswoman Natasha 
Haubold defended the recent 
contract awards. “These were 


| primarily extensions to exist- 


ing contracts, and we didn’t 
initiate these extensions,” 
Haubold said. “They were put 
in place to avoid service dis- 
ruptions that could affect the 
national security and the citi- 
zens of the United States.” 

Asked about the GETS con- 
tract, Haubold said the new 
phone system was designed to 
address national security by 
giving priority to emergency 
calls during crises such as the 
Sept. ll terrorist attacks. 

She noted that MCI has lost 
other contracts because of the 
GSA’s suspension. For exam- 
ple, the National Guard award- 
ed Sprint Corp. a network deal 
that replaced an expiring con- 
tract with MCI, according to 


Haubold. @ 42506 


year has been a customer 
since 1994 and described the 
relationship between the two 
companies as “very successful, 
strong and strategic.” Wohl 


| added that SAP is willing to 


help Goodyear resolve the 
problems, but the tire maker 
said it doesn’t expect to need 


| any assistance. 


SAP’s software is one of the 
most mature accounting appli- 
cations on the market, said 
Karen Peterson, an analyst at 
Gartner Inc. 

Noting that this is the 
biggest accounting systems 
failure she has heard of in 
recent years, Peterson said it 
underscores the need for users 
to fully test new ERP systems 
and carefully scrutinize the fi- 
nancial data they produce be- 
fore going live with the soft- 


| ware. @ 42459 
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FINANCE UPGRADE 


Oracle plans to announce a new release of 

its treasury management software 
QuickLink 42474 
www.computerworld.com 
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Sarbanes-Oxley Mandates 
Lead to IT Certification Push 


Corporate execs call on IT managers to 
document controls on finance systems 





BY THOMAS HOFFMAN 
EOs AND chief finan- 
cial officers who are 
obligated by the 
Sarbanes-Oxley Act 

to stand behind the financial 

accounting controls used by 
their companies are increas- 
ingly asking operating units, 
including IT, to certify that 
they have put adequate safe- 
guards in place. 

“I’m hearing a lot of discus- 
sion about that,” said Chris 
McLaughlin, global director of 
financial services marketing at 
FileNet Corp., a Costa Mesa, 
Calif.-based software vendor 
that sells document manage- 
ment tools for use in Sarbanes- 
Oxley compliance projects. 

With CEOs and CFOs now 
being held accountable for the 
accuracy of the financial re- 


porting at their companies, 
“they are looking for ways to 
distribute that responsibility 
downward through their orga- 
nizations,” McLaughlin said. 
That includes asking IT man- 
agers to certify the systems 
used to process financial data, 
he added. 

Some companies are doing 
internal audits using certifica- 
tion standards such as SAS 70 
to give their IT operations the 
equivalent of a Good House- 
keeping Seal of Approval. 

SAS 70 — known formally 
as the Statement on Auditing 
Standards No. 70, Service Or- 
ganizations — was developed 
by the New York-based Amer- 


ican Institute of Certified Pub- | 


lic Accountants (see box). 
In addition, some outsourc- 
ing vendors have started offer- 


Companies Get More 
Compliance Tool Options 


It’s welcome news for those struggling 
to meet new regulatory requirements 





BY JAIKUMAR VIJAYAN 
Companies looking for tools 
to help them monitor their 
compliance with privacy and 
other regulatory requirements 
have a couple of new offerings 
to consider. 

IBM Global Services last 
week announced a service 
aimed at helping corporations 
comply with privacy regula- 
tions related to the collection 
and use of personal informa- 
tion on their Web sites. 

IBM will deliver the service 
in collaboration with Watch- 
fire Corp. The Waltham, 
Mass.-based security vendor 
has been selling compliance 
management software as a 
part of a wider Web quality 





assurance product for several 
years. Under an agreement an- 
nounced last week, IBM will 
use the Watchfire technology 
to deliver a subscription- 
based managed compliance 
monitoring service. 

The service will use Watch- 
fire’s software to monitor Web 
sites for things such as data 
collection and sharing prac- 
tices, opt-in and opt-out choic- 
es, broken links, missing priva- 
cy policies, third-party linking 
and the use of tracking tech- 
nologies, said John Burg, a pri- 
vacy services manager at IBM. 

The company also sells 
compliance technology called 
Tivoli Privacy Manager, which 
monitors and enforces privacy 








ing SAS 70 audits to their 
clients. That was an unexpect- 
ed windfall for Energy Ab- 
sorption Systems Inc. after the 
Chicago-based maker of high- 
way crash barriers hired an 
application service provider 
(ASP) earlier this year to man- 
age its finance applications. 
“We see them as another 


| group to help us improve on 


our internal controls,” said 
Bob Latek, senior vice presi- 
dent and controller at Energy 
Absorption Systems. 

Latek, who spoke at an IT 
conference for CFOs last 
month [QuickLink 42353], said 
that letting the ASP run the 
certification process should 
help his company cut its Sar- 
banes-Oxley compliance costs 
in half “and save us a lot of 
time, too.” 

Anthony Noble, director of 
IT audits at Viacom Inc., said 
that at the next meeting of the 
company’s divisional CIOs in 


policies at the application and 
transaction level. Watchfire’s 

technology adds a Web moni- 
toring capability. 

A company with a Web site 
that has about 10,000 pages 
can expect to pay $40,000 in 
initial assessment and valida- 
tion costs and then a monthly 
fee of up to $15,000 for IBM’s 
compliance service, Burg said. 

“Humans couldn’t possibly 
do such automated monitor- 
ing,” said Monica Champion, 
senior vice president of Inter- 


Privacy Patrol 


IBM's compliance 
offering will provide: 
= Assessment and validation 
services to identify potential 
problem areas. 
@ Services to help develop and 
implement privacy policies. 
Monitoring services to 
ensure compliance with 
policies. 





SAS 70 


WHAT IT IS: An auditing 
standard designed to show that 
a “service organization” has 
done an in-depth examination 
of its internal controls. 


HOW IT WORKS: Most cert- 
ifications related to Sarbanes- 
Oxley use a so-called Type il 
report, which describes the 
controls plus provides for 
detailed testing of them for 
at least six months. 


RCE. THE AMERICAN IN 
January, he plans to raise the 
issue of whether the New 


MTV, CBS, Blockbuster Video 
and other entertainment busi- 
nesses should conduct IT cer- 
tifications. 

Noble said he understands 
the potential usefulness of 


net and e-business at Atlanta- 
based SunTrust Banks Inc. 
The bank is using Watch- 
fire’s WebXM software to scan 
and monitor its Web site for 
violations of preset privacy 
policies [QuickLink 41118]. “It 


| allows you to ensure that you 


are doing what you say you 
are doing,” Champion said. 


Meeting Mandates 


| Meanwhile, Consul Risk Man- 


agement Inc., a Delft, Nether- 
lands-based company with 
U.S. headquarters in Herndon, 
Va., last week rolled out soft- 
ware designed to help compa- 
nies monitor compliance with 
the requirements of the Sar- 
banes-Oxley Act. 

The offering is a module for 
Consul’s InSight Security 
Manager 5.0 suite of security 
event management and audit- 
ing software. The software al- 
lows companies to monitor 
and audit user access to data 
across a wide range of operat- 
ing environments, said Marc 
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such certifications as a sort of 
“life insurance policy.” But he 
added that he’s skeptical about 
the way some big auditing 
firms are using SAS 70 as a 
sales tool to generate incre- 
mental business through Sar- 
banes-Oxley consulting deals. 
Ed Trainor, senior vice pres- 


ident of information systems 
| at Paramount Pictures Corp., 
| a Hollywood-based Viacom 


unit, said IT certifications “are 
a commendable thing to do for 
a variety of reasons.” Howev- 
er, they “require a consider- 
able investment, and the bene- 
fit must be weighed against 


| other needs and priorities for 
| scarce resources,” added 
| Trainor, who is also president 


of the Chicago-based Society 


| for Information Management. 


The SAS 70 Type II report 


| that companies can use to 


document the effectiveness of 
their internal IT controls will 


| have to be updated to meet re- 
| York-based parent company of | 
| banes-Oxley, such as quantify- 
| ing the extent of testing done 

| on financial systems, said 

| Lynn Edelson, a Los Angeles- 

| based consultant at Price- 

| waterhouseCoopers. @ 42512 


quirements specific to Sar- 


| vanZadelhoff, director of 


product development at 


| Consul. 


The Philadelphia Stock Ex- 


| change is using an early ver- 


sion of the software to moni- 
tor user access to a mix of 
Unix, IBM mainframe and 
proprietary Stratus Technolo- 
gies Inc. VOS operating sys- 
tem environments. 

Consul’s software allows the 
stock exchange to gather log 
information from all those sys- 
tems and present it in a stan- 
dardized form in a Windows 
system, said Bernie Donnelly, 
the exchange’s vice president 
of quality assurance. “We want 
to keep track internally of who 
is going where and for what,” 
Donnelly said. 

The starting price for Con- 
sul’s Sarbanes-Oxley module 
is $40,000. @ 42505 


MORE THIS ISSUE 


For related coverage, see “Keeping 
Secrets” on page 25 and Maryfran 
Johnson's editorial on page 20. 





SAS, the leader in business intelligence software, challenges... 


Ae 
elem mee Teme) am cis 


With Sarbanes-Oxley compliance deadlines less than a year away, there is an urgency to deliver financial 


ENTERPRISE i 


SUPPLIER » 


ORGANIZATIONAL 


CUSTOMER 


INTELLIGENCE 
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BRIEFS | 
Linux Group Adds 
2.6 Test Release 


Open Source Development Labs 
Inc. said a new version of the Lin- 
ux 2.6 kernel is available for test- 
ing by corporate users and soft- 
ware vendors. The release, called 
Test9, can be downloaded at 
www.kernel.org or ftp.kernel.org, 
the Beaverton, Ore.-based non- 
profit company said. The 2.6 ker- 
nel is being designed to support 
increased scalability, such as the 
ability to run Linux on servers 
with 32 or more CPUs. 


EDS Has Q3 Loss, 
Plans More Cuts. . . 


Electronic Data Systems Corp. re- 
ported a third-quarter net loss of 
$600,000 and disclosed plans to 
cut another 2,500 jobs by the end 
of next year, in addition to the 
2,700 positions it previously had 
said would be eliminated. The ex- 
panded cutback will reduce the 
Plano, Texas-based company’s 
135,000-person workforce by 
4%. EDS said revenue totaled 
$5.24 billion in the third quarter, 
up 6% year-over-year. 


... And Restates 
First-Half Results 


In addition, EDS lowered its re- 
sults for the first half of the year 
after adopting new accounting 
rules that require companies to 
change the way they book rev- 
enue from long-term contracts. 
EDS added a $2.24 billion charge 
to its first-quarter results and 
said it will now book most con- 
tract revenue as payments are 
received from customers. 


Short Takes 


EQUINIX INC. in Foster City, Calif., 


said it’s subleasing a Web-hosting | 


data center in Santa Clara, Calif., 
from SPRINT CORP., which is exit- 
ing the hosting business [Quick- 
Link 39162]. . .. MICROSOFT 
CORP. has agreed to settle anti- 
trust-related class-action lawsuits 
filed in five states plus the District 
of Columbia. 





Continued from page 1 


Shippers _ 


| sector will have to pay for 
| most of the upgrades to ship- 


ping containers and networks 
that will enable officials to 
know if and when sensitive 
cargo has been tampered with. 


| And some said it’s possible to 


make the new security require- 

ments pay for themselves. 
That argument will be pre- 

sented this week to the U.S. 


| Department of Homeland Se- 
| curity in a report by the 


Strategic Council on Security 
Technology (SCST), an inde- 


| pendent industry group of 


port operators, shipping com- 
panies and IT vendors. 
Computerworld obtained an 


| advance copy of the report, ti- 
| tled “Smart and Secure Trade- 


lanes,” which shows that the fi- 
nancial benefits to shippers of 
a fully automated cargo man- 
agement and security system 


would exceed the total systems 


cost per shipping container. 
The SCST conducted an 
eight-month test that involved 
a mix of commercial IT tools, 
including Web-based manage- 
ment software, wireless tech- 
nologies, electronic container 
seals, radio frequency identi- 


| fication (RFID) tags and exist- 


ing ERP software. Sixty-five 


| companies processing 818 
| containers across three conti- 


nents demonstrated potential 


| net savings to shippers of $378 | 


to $462 per container per 


| shipment. More than 6 million 
containers enter the U.S. 
| every year. 


The test, which ended in 
June, also showed that shippers 


can “potentially derive both di- 


rect and indirect logistics effi- 
ciencies,” the report concludes. 


Cee eeccceesecssseeseseseeseceee 


Correction 

A story that was part of the 
Salary Survey 2003 feature in 
our Oct. 27 issue (“Boost Your 
Chances of Getting a Raise”) in- 
correctly identified Katherine 
Spencer Lee’s employer as RHI 
Consulting. The Menio Park, 
Calif.-based company has 
changed its name to Robert 
Half Technology. 


> Administrative labor 





NEWS 


SRS AP AANA RUS EOI 
Potential Operational 
Savings to Shippers 


SAVINGS AS A PERCENTAGE 
MMU TE Ta iREl 


0.04%-0.05% 


AREA OF SAVINGS 


Reduction of 
service charges 
Reduction of 
pilferage, inspec- 
tions, loss 
Reduction in 
safety stock 


Reduction in 
pipeline inventory 


0.54%-0.66% 


0.08%-0.10% 


0.04%-0.05% 


0.25%-0.30% 


0.13%-0.16% 


at Ure 

ee digs VL cs) 
$31-$38 
$56-$68 
$28-$34 
$173-$211 


$91-Si11 


$379-3462 


NOTE: Savings don't include potential reduction in transportation costs. 
* Based on an average container cargo value of $70,000 


“The real-time security au- 
tomation functionality gives 
shippers the flexibility to de- 
crease inventory safety stocks, 
increase customer service lev- 
els, or both. We believe the in- 
cremental security and effi- 
ciency benefits to these supply 
chain constituencies and to so- 
ciety overall are significant.” 


Security Tools Desired 
One improvement that would 
benefit both shippers and their 
customers, such as large retail 
outlets, is the ability to lever- 


| age new security-tracking tools 


and networks to detect routing 
changes and estimated arrival 
times, according to the report. 
“The combination of RFID 
infrastructure and software 
tests identified that 5% of 
the correctly registered and 
tracked containers deviate sig- 
nificantly from their assigned 
routing,” the report states. In 
total, 35 containers had vessel, 
scheduling or routing data that 
differed drastically from reality. 
Steve Lambright, vice presi- 
dent of technology marketing 
at Savi Technology Inc. in 
Sunnyvale, Calif., and one of 
the authors of the SCST re- 
port, said the study included a 
test of the current manual 


integrity of mechanical con- 
tainer seals throughout vari- 
ous points in the shipping 
process. According to Lam- 
bright, in 60% of cases, the 
shipper didn’t receive any re- 





ports on the integrity of the 
container seals. 

In addition, in the 40% of 
cases where the status of con- 
tainer seals was reported, the 
serial number of the container 
was wrong more than half the 
time. In a follow-up test of 


| three containers that involved 


deliberately broken security 
seals, only one container was 
reported as being opened, but 
with the wrong serial number. 
Douglas Browning, deputy 


| commissioner of the U.S. Bu- 
reau of Customs and Border 


Protection at the DHS, said the 


‘Smart’ Containers 
Coming This Month 


NEW YORK 
As part of the Department of Home- 
land Security's Container Security 
Initiative (CSI), a group of shipping 
companies later this month will be- 
gin using new “smart” containers 
equipped with high-tech devices 
that will enable officials to deter- 
mine if cargo has been tampered 
with prior to entering a U.S. port. 

Although cargo shipments des- 
tined for U.S. ports won't be required 
to use the new containers, the feder- 
al government has kick-started an 
effort to encourage greater use of 
the technologies by private trans- 
portation companies, said Douglas 
Browning, deputy commissioner for 
the Bureau of Customs and Border 
Protection (CBP) at the DHS. 

In addition, as part of the CSI 
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cost of upgrading shipping 
containers with new electronic 
capabilities and of developing 
new containers and infrastruc- 
tures from scratch pales in 
comparison to the cost of al- 
lowing a single terrorist attack 


| to take place at a USS. port. 


Given the real-time nature 
of the U.S. economy, the total 
losses from an attack against 
the port of Los Angeles, for 
example, “would be cata- 
strophic,” said Browning, not- 
ing that most of the country’s 
trade routes would be closed 
down as a result. 

“I know these figures ap- 
pear to be astronomical,” he 
said, referring to the UN cost 
estimate. “However, they rep- 
resent one-tenth of the total 
[value] of the cargo that tran- 
sits the port of Los Angeles on 
an annual basis.” 

During a presentation on 
cost sharing by Michael Con- 
ners, an analyst at Booz Allen 
Hamilton Inc. in McLean, Va., 
an attendee criticized the anti- 
security lobbying efforts of 
large retailers reluctant to pay 
higher prices for their inven- 
tories. Wal-Mart Stores Inc. 
was cited as one example. 

“Wal-Mart speaks loudly,” 
said Conners. Bentonville, 
Ark.-based Wal-Mart didn’t re- 
spond to Computerworld’s re- 
quest for comments. @ 42509 


program, the top 19 ports outside 
the U.S. have agreed to inspect 
outbound containers before depar- 
ture. Browning said plans call for a 
total of 47 ports to be taking part in 
the program by this time next year. 

Browning also said the 24-hour 
advanced electronic manifest re- 
porting rule that the U.S. put into 
place last December has been work- 
ing well. “We've received more than 
7 million bills of lading, and of those, 
we have only had to issue 600 de- 
nials of lading,” said Browning. 

The CBP has also proposed a 
rule that would require electronic 
notification in advance of changes 
to cargo before it can enter the 
U.S., Browning said. “The advance 
collection of this data directly im- 
pacts our ability to keep terrorists 
and the implements of terror from 
crossing our border,” he noted. 

~ Dan Verton 
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OPINION 


MARYFRAN JOHNSON 


ivacy Rules: Y3k? 


| to solve the problem. IT executives 
| are also mindful that corporate hind- 


ITING PRIVACY LAW, Senators Seek 
Probe of JetBlue,” read the headline 


on our Web site [QuickLink 42295], re- 

ferring to the airline’s legal and publici- 

ty problems after handing personal 
information on some 5 million passengers over to a 


Pentagon contractor. 


Now substitute your 
company’s name for Jet- 
Blue. 
On a visceral level, you 
just got the core sales 
pitch behind the wave of 
products rolling across 
the privacy frontier. Risk 
avoidance of the most se- 
rious business kind — the 
kind that impacts cus- 
tomer relationships and 
business reputations for- 
evermore. That’s also why 
the biggest driver of IT spending in 
2004 is likely to be compliance with 
the daunting list of new laws and 
regulations affecting data privacy, 
protection and management. 
“Privacy is no longer just about 
the right way of doing things; it is 
also the legal way of doing things,” 
says Michelle Boggess, electronic 
data security coordinator at Baptist 
Health Care in Florida. She’s quoted 
in our “Keeping Secrets” story on 
page 25 [QuickLink 42105] about the | 
array of products for monitoring and | 
enforcing privacy regulations. | 
And quite an array it’s becoming. 
Privacy products are lining up to 
compete in this regulatory whack-a- 
mole game. Some are created ex- 
pressly for the compliance niche; 
some are being “repurposed” from 
their original roles as spam filters or 
quality assurance or Web site man- 
agement tools. Almost any product 
with a data management or monitor- 
ing spin will take a turn as a privacy 
or regulatory compliance “solution.” 
IBM last week joined the fray with 
a bundled offering of hardware, soft- 
ware and services. The requisite ana- 





lyst cooing over the announcement 


made note of the com- 
prehensive, integrated 
nature of the products. 
Not so coincidentally, 
IBM’s emphasis on the 
automated processes 
these products enable 
fits neatly into its overall 
“on-demand” computing 
strategy. But IBM has 
grander intentions than 
selling compliance soft- 
ware. The real message 
is for companies to 


| leverage this compliance mandate 
| and retool entire IT systems and 
| business processes. 


Sounds familiar, doesn’t it? That 
same message sold a lot of ERP sys- 


| tems in the late ’90s, and that echo 
| isn’t lost on senior IT managers. 

| Some have nervously dubbed this 

| round “Y3k,” although nobody can 
| wait till the end of this millennium 


| ing that Y2k code fixes involved. 


| cesses of the dot-com era, IT was left 
| (unfairly, perhaps) with a significant 
| credibility gap on the business side. 


| luctant savior. But this is clearly a 


| to regain credibility with CFOs and 
| CEOs. What makes Y3k different 
| from Y2k? I think it’s the level of 


customer losses and company repu- 
| tations. 


| game, especially now that the prod- 
| ucts are proliferating. Be front and 
| center with advice for CFOs, audi- 
| tors, risk managers and compliance 


| technologies vendors are throwing 

| at the compliance problem. Only IT 

| can enable the kind of business proc- 
| ess integration that needs to happen. 


| sure that Y3k doesn’t become future 
| shorthand for another technology 


sight wasn’t kind to the overspend- 


Combined with the subsequent ex- 


So here we are with another bus- 
iness crisis looming, and IT the re- 


leadership moment, a chance for IT 


business understanding of what’s at 
stake. This time, unlike some geeky 
code fix, it’s about legal penalties, 


But IT leaders need to get in this 


officers. Only IT can evaluate the 


Most important, onlyIT canen- | 


overspending hangover. @ 42471 
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Y THE PUBLIC SEEMS 


GRATEFUL FOR THE 
NEW PRIVACY 
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PIMM FOX 
Squeegee IT’ 
Grows Up 


T ISN’T GLAMOROUS, but 
it works. 
That’s what I think of 
screen-scraping technology. 

But I didn’t always feel that way. The 
transition from constrained green- 
screen legacy systems to sleek Web- 
based formats replete with Java scripts 
and XML messaging seemed too much 
to handle for plebeian scraping tech- 
nology. 

Then I learned about how Indiana 
Farm Bureau Inc. (www.infarmbureau. 
com) used technology from Israel- 
based Jacada Ltd. to transform multiple 
screen presentations into a simplified, 
easier-to-comprehend graphical layer. 

The Indianapolis-based insurance 
operation didn’t want to spend lots of 
money, because CIO Greg Clancy felt 
that the Computer Sciences Corp. pro- 
gram running on its IBM AS400 host 
was perfectly adequate. 

“In a lot of legacy systems, you have 
all you need to per- 
form. The function- 
ality exists,” he says. 

“You just want to 
shield users from the 
system’s quirks.” 

Those quirks in- 
cluded wonders of 
past computing like 
entering multiple 
codes just to access 
different functions, 
such as getting insur- 
ance quotes from the 
application. Training 
users on the 20-year-old system typi- 
cally took weeks, another issue Clancy 
wanted to address. 

I confess to being dubious about 
wrapping technology around technolo- 
gy, because I think it retards function- 
ality, particularly when it comes to se- 
curity. But Goutam Kundu, director of 
technology at Indiana Farm Bureau, 
says all transactions coming from the 
back end pass through the Jacada serv- 
er, use 128-bit encryption in the form 
of a cookie, and afford users one place 
to log on for the entire application. He 
also says the new graphical user inter- 
face has enhanced user productivity. 

Developed completely in Java with 
open-ended modules so you can tack 
on your own Java code, Jacada’s tools 
have drop-down windows to make it 
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easier for developers to make changes. 
In addition, the new presentation layer 
is deployed via the Web using the com- 
pany’s intranet, opening up the possi- 
bility of integrating other XML-friend- 
ly applications. 

And since members of the field sales 
force were already using a PC applica- 
tion, they needed very little training to | 
move from the 25-screen CICS applica- | 
tion to the GUI with just two screens. 
The 450 agents in 131 offices now train 
using self-directed education along 
with a short orientation course. 

Not every adaptation is going to be 
completed in six months, nor will 
every GUI obviate fiddling with the 
business logic. I still think there are in- 
stances where remapping and refitting 
legacy applications isn’t going to be 
accomplished by seamless, low-cost 
Java tools. 

But if what you're after is bridge 
technology to extend vendor packages 
that you plan to use for many years — 
without big modifications — then go 
on, scrape away. @ 42397 


THORNTON A. MAY 


Organize for 
Innovation 


RGANIZATIONAL re- 
structuring is one of 
the most frequently 


used tools at an IT leader’s 
fingertips. Sadly, most reorganization 
efforts fail to significantly improve a 
department’s performance. The search 
continues for IT organizational struc- 
tures that are able to do a better job 
delivering the full value inherent in the 
department’s powerful technologies. 

In workshops I recently conducted 
at the Cisco CIO Summit and the inau- 
gural meeting of the Executive 10 of 
Oregon (the CIOs of the 10 largest or- 
ganizations in the rain state), deep- 
thinking IT leaders grappled with how 
they might better structure their IT 
shops. We focused on three issues: 

@ What is driving IT organizational 
change? 

@ What is wrong with the current 
structure? 

@ What are some principles for de- 
signing effective IT shops? 

And here’s what we learned. Organi- 
zational change is driven by a combi- 
nation of these five stimuli: 

@ New guy/new strategy — a new C- 


OPINION 


arranging the furniture. 

@ A catastrophic faux pas 
— something goes terribly 
wrong and the enterprise 
responds structurally to 
fix it. 

® Merger/acquisition/in- 
dustry consolidation. 

®@ Regulatory require- 
ments. 

@ Mind-set change — 
somebody high up in the or- 
ganization believes there is 
a more rational way to orga- 
nize IT resources. 

Our industry bulges with examples 


server, 


of IT reorgs gone wrong. At the Center | 


for Advancing Business Through In- 
formation Technology, we’re examin- 
ing the structural pathologies that get 
in the way of IT reorganizations being 
successful. The biggest reason IT re- 
structurings fail is that they don’t ad- 
dress the entire technology life cycle. 
Full-circle IT involves the following 
nine critical steps: 

1. Conceiving an opportunity: What do 
we want technology to do for us? 

2. Contextualizing IT opportunities: 
Examine IT projects in the context 
of organizational mission and re- 
sources and compare them against 
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other projects. 

3. Simulating: What will 
our workplace be like 
when the project is done? 
How will workplace behav- 
iors change? 

4. Choosing: The process 
whereby executives allo- 
cate IT resources. 

5. Designing: The blue- 
print of what the system 
will deliver and how the 
system will work. 

6. Building: Moving from 
drawing board to desktop. 

7. Deploying: Getting the technology 
into the workplace. 

8. Operating/maintaining: Making sure 
it works. 

9. Retiring: Making sure that technol- 
ogy that’s no longer relevant or no 
longer optimal is removed. 

Survivors of failed IT reorganizations 
group their lessons into three buckets: 
innovation, operation/optimization 
and collaboration. The ability to bal- 
ance optimization with innovation in 
every major work process in the enter- 
prise is the sought-for, seldom-achieved 
goal. For example, airlines have achieved 
Six Sigma standardization regarding 
in-air safety but only Two Sigma effi- 
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ciency for baggage handling. 

Most IT organizations structure 
themselves to give users exactly what 
they want (that is, they are highly col- 
laborative) at the expense of opera- 
tional efficiency; undertake experi- 
ments at the expense of operational ef- 
ficiency; or dramatically restrict tech- 
nology choices and operate highly effi- 
cient IT shops at the expense of inno- 
vation and collaboration. 

According to the best IT shops, you 
should instead organize to gain control 
over the IT supply chain. For example, 
use access to the network as a behav- 
ioral modifier to make sure that busi- 
ness units can’t do mood-based tech- 
nology procurement. In that way, off- 
the-reservation technology doesn’t ge 
on the corporate network. However, 
you must create a visible process for 
business units to obtain exceptions to 
enterprise standards. 

Finally, you need to formalize the 
structure for innovation and reward in- 
novative technology ideas emerging 


from business units. @ 42405 


WANT OUR OPINION? 
More columnists and links to 


columns are on our Web site 
www.computerworld.com/columns 








level executive shows up and starts re- 


Insightful Look at 
IT/User Interaction 


Pes, GLEN’S Oct. 6 column 
(“Stop ‘Gathering’ IT Require- 
ments,” QuickLink 41565] nailed 
the situation on the head. In my ex- 


perience, getting the proper under- | 


standing between users and tech- 
nicians is the Achilles’ heel of to- 
day's business environment. The 
technicians prefer the path of least 


resistance: take a few notes and go | 


off to reinterpret reality according 
to what's convenient and exciting 
for them. The users, certain that 
they're about to be drowned in 
technical terms and abstractions, 
would rather be anywhere else. 
As a consultant, I've had the 
good fortune to learn some great 


techniques. As the session unfolds, | 


everyone begins to see that: 1) no- 
body really has a firm, clear defini- 
tion of the business data and how it 
interrelates; and 2) getting that 
firm, clear definition is a lot of hard 
work. I've had sessions where par- 
ticipants who came expecting to be 
bored to tears departed wrung out 


from the rigors of being forced to 
think about their data reality to a 
depth they had never had to before. 
(| compare it to taking an SAT test 
every day for three solid days.) 
Every technician should read 
Paul's column, and those responsi- 


ble for interacting with users should 


frame it. Thanks to Computerworld 
for publishing this insightful piece. 
Perhaps if more of us keep sound- 
ing this horn, eventually the indus- 
try will listen. 

Roger B. Thomas 

Principal, JCK, 

Port Huron, Mich., 
roger@jckconsulting.com 


Long-term Goals 


HAME ON Ci0s and CxOs who 

permit security managers to 
scare them into budget changes 
[“Scare Tactics No Longer Guaran- 
tee Security Funding,” QuickLink 
42025]. In good times and bad, 
poor management results in lost 
dollars and opportunities. More se- 
curity for privacy and record-keep- 





Must Drive Budgets | 


| 





ing means the focus on the bottom 
line needs to be sharpened 
Changes within the organization 
are always an opportunity to im- 
prove performance and reach 
goals, but senior managers must 
keep their eyes on the several balls 
they've decided to juggle. Allowing 
daily events like the latest security 
problem to drive budgets and 
strategic goals is like going outside 
the house to swat flies. A security 
manager should go back to the se- 
curity policy and, after checking for 


consideration of regulatory require- 


ments, make sure the policy ulti- 
mately drives budget requests. 
Dave Kendall-Sperry 
President, K&S Services, 
Dublin, Ohio, DaKendall@ 
Columbus.RR.com 


Grid Article Didn’t 
Go Deep Enough 


LTHOUGH | FIND Gary H. An- 
thes’ article “Grids Extend 
Reach” [QuickLink 41610] very in- 

teresting, it is also very narrow in 
scope. It focuses only on the appli- 


| 
| 
| 
| 


| 
| 


cation layer. The grid addresses 
other layers of the IT infrastructure 
as well, such as the pooling and 
sharing of resources at the storage, 
database server and application 
server levels. And contrary to the 
article, most commercial applica- 
tions don’t need to be rewritten to 
take advantage of many aspects of 
grid technology being pioneered by 
Oracle Corp. in Oracle 10g (now in 
beta testing). 

R. David Peterson 

Senior technology consultant, 
Los Angeles, RDavidPeterson 
@ Yahoo.com 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to Jamie 
Eckle, letters editor, Computerworld, 
PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701. 
Fax: (508) 879-4843. 

E-mail: letters@®computerworld.com. 
Include an address and phone num- 
ber for immediate verification. 


e For more letters on these and 
other topics, go to 
www.computerworld.com/letters 
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Dell has a customized IT solution for your business, no matter what business you're in, or what size it is. From PowerEdge” servers 
featuring Intel® Xeon™ processors to network support products like PowerVault™ storage and PowerConnect” switches, Dell offers flexible 
high-performance industry-standard technologies and software solutions that are just right for your particular business needs. And we'll help you 
every step along the way. Whether it’s planning and design, testing and validation, systems management, or our ard-winning 24x7 service and 


| 


support, Del | help you create an IT infrastructure tt easy to choose, deploy and manage. So make life y on yourself and ¢ 


your competition—with a unique IT solution from Dell 


Dell Rated #1 in Intel-Based Server Satisfaction 
21 Out of 22 Consecutive Quarters 

Technology Business Research 

Corporate IT Buying Behavior and Customer Satisfaction Study 

First Quarter 2003 


—dJuly 2003 


Call: M-F 7a-8p Sat 8a-5p, CT 








From entry-level towers to robust 


File&Print Servers rack-mountable solutions that fit 


existing infrastructures 
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Small Business Value Server 1U Value Rack Server 


$399 E-VALUE Code: 20257-S21103g 


Database&Web Application-specific servers f 
F that can meet most any challenge 
Hosting Servers Se ead 


POWEREDGE™ 2600 TOWER SERVER NEW POWEREDGE™ 1750* RACK SERVER The support d 
Multi-Use Tower Server Feature-Rich 1U Rack Server Hering 


w as $49/mo., (46 pmt $ ; $55/mo., (46 pmt 
E-VALUE Code: 20257-S21117g E-VALUE Code: 20257-S21120g 


4-Way Servers SITET MO cdr Tia uu Cait 


Handle intense networking needs with ease Meat ei ele me) i h-performance switches 
enhance your network t our network 


Pasa cess . . 
| Wigh-Speod Mission Critical Server ata ya aero Pe meee Lo 


© Up toF te at 1.50GH Optimized File Storage Across the LAN High-Performance Workgroup Switch 
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www.dell.com/storage4mybiz 


Solutions that fit. Easy as BDSGLL 


Click www.dell.com/bizsolutions Call 1-800-757-1432 
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BET DATA IN THE 


BLINK OF AN EYE 


For your next generation of applications, move 
to the next generation of database technology. 

Caché is the post-relational database that com- 
bines high-performance SQL for faster queries and 
an advanced object database for rapidly storing 
and accessing objects. With Caché, no mapping 
is required between object and relational views of 
data. That means huge savings in both development 
and processing time. 

Applications built on Caché are massively scala- 
ble and lightning-fast. Plus, they require minimal or 
no database administration. 

More than just a database system, Caché incor- 
porates a powerful Web application development 


environment that dramatically reduces the time to 
build and modify applications. 

The reliability of Caché is proven every day in 
“life-or-death” applications at thousands of the world’s 
largest hospitals. Caché is so reliable, it’s the leading 
database in healthcare — and it powers enterprise appli- 
cations in financial services, government and many 
other sectors. 

We are InterSystems, a specialist in data manage- 
ment technology for twenty-five years. We provide 
24x7 support to four million users in 88 countries. 
Caché is available for Windows, OpenVMS, Linux and 
major UNIX platforms — and it is deployed on systems 
ranging from two to over 10,000 simultaneous users. 


InterSystems » 


E.. CACHE 


Make Applications Faster 


Try a hetter database. For Free. 


Download a free, fully-functional, non-expiring version of Caché or request it on CD at www.InterSystems.com/robust 
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TECHNOLOGY — 


WebDAV 


Web-based Distributed Authoring and 


Vendors are rushing an assortment of products to market that monitor and 
enforce compliance with privacy regulations. BY JAIKUMAR VIJAYAN 


a0 


S THE INFORMATION SYSTEMS security manager 

at Community Health Network in Indianapolis, 

a major part of David McLain’s job is to ensure 

that employees are adhering to the require- 
ments of the Health Insurance Portability and Account- 
ability Act (HIPAA). 

That means making sure that protected patient health 
information isn’t transmitted in a noncompliant manner 
within or outside of the hospital system’s networks. 

To monitor, audit and enforce compliance, McLain uses 
an automated tool called VIEW for Privacy Protection, a 
content monitoring product from Vericept Corp. in Engle- 
wood, Colo. VIEW, which stands for Vericept Intelligent 
Early Warning, uses hardware devices to sniff out and 
document e-mail, instant messages, chat sessions and 
peer-to-peer or file-sharing sessions that violate privacy 
rules on Community Health’s networks. For instance, all 


communication of unencrypted patient information, such 
as account numbers, medical information or payment his- 
tory, is automatically flagged and stored for later review 
and action. 

Such automated capabilities are crucial to Community 
Health’s ability to stay on top of its HIPAA obligations. 
“Without a product like this, we wouldn’t have been able 
to see what was going on in our networks,” McLain says. 


Regulatory Push 

VIEW is one of a growing number of products that are 
being offered up as automated tools for monitoring and 
auditing privacy compliance. 

Vendors of such products hope to tap into concerns 
about liability issues, such as the need to comply with a 
growing number of privacy regulations, says Pete Lind- 
strom, an analyst at Spire Security LLC in Malvern, Pa. 
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Continued from page 25 

Some of the privacy regula- 
tions are industry-specific, such 
as HIPAA’s mandates for health care organizations 
and the Gramm-Leach-Bliley Act’s requirements for 
financial services companies. But others cut across 
industries, including Europe’s data privacy regula- 
tions and California’s Security Breach Notification 
Act, which requires companies to inform customers 
of security breaches that compromise some types of 
personal data. 

“Privacy is no longer just about the right way of 


doing things; it is also the legal way of doing things,” 
says Michelle Boggess, electronic data security coor- 
dinator at Baptist Health Care’s compliance office in 
Pensacola, Fla. 

Many vendors have responded with compliance 
monitoring and enforcement products. “Everyone in 
the security space wants to take some credit for ad- 
dressing privacy issues,” Lindstrom says. 

It’s important to remember, however, that most 
of the tools are still evolving and remain largely 
untested in enterprise environments, says Roger 
Brown, an IT auditor at Jefferson Health System, a 
$2 billion health care organization in Radnor, Pa. Or- 
ganizations need to first have good processes and 


policies in place for such tools to be effective, he says. 


But implemented properly, such automated tools 
can deliver far better efficiencies than manual com- 
pliance checks, which are “destined for failure,” 
Lindstrom says. 


The Pure Plays 


Most tools fall into one of two categories: products 
developed specifically to address privacy compli- 
ance; and repurposed products, such as spam-filter- 
ing software, that now focus on privacy issues. 

Several vendors offer tools with privacy compli- 
ance as the core function. 

IBM’s Tivoli Privacy Manager for e-business tech- 
nology is one example. The product, which works 
with AIX, Solaris and Windows 2000 systems, is de- 
signed to monitor and enforce compliance at the 
transaction and application levels, says product 
manager Steve Adler. 

A company can use Tivoli Privacy Manager to 
convert a written privacy policy into digital form 
and use those policies to control the manner in 
which applications and users access sensitive data. 
It gives companies a way to centrally create, edit, 
manage and audit policies that dictate which sen- 
sitive information is accessed, by whom it is ac- 
cessed, the purpose for which it is accessed, and 
how it is shared, stored and eventually destroyed, 
Adler says. 

Other examples of privacy-specific products in- 
clude WebXM software from Watchfire Corp., Vontu 
Protect from Vontu Inc. and Liquid Machines from 
Liquid Machines Inc. 


| that affect privacy. 


| software, originally developed as a quali- 


| based online job-posting site, uses Coast’s 
| Web Quality Central to monitor Web site content 
and functions. The software periodically scans Go 


TECHNOLOGY 


Waltham, Mass.-based Watchfire is selling its 


| privacy tool as a component of a wider Web site 


management and quality assurance tool. WebXM 


can be used to scan Web sites for information col- 


lection practices, links to privacy policies, user- 
tracking practices and Web page security practices | 
San Francisco-based Vontu’s product, meanwhile, | 
is targeted at insider threats and allows companies to | 
monitor their networks for transmission of confiden- | 


| tial customer or employee information, says Doug 
| Camplejohn, a company vice president. 


Lexington, Mass.-based Liquid Machine’s product 
is aimed at helping companies protect sensitive doc- 
uments and data by controlling who gets access as 


| well as where, when and how access is granted, ac- 
| cording to CEO Jim Schoonmaker. 


| The Converts | 
Ottawa-based Coast Software Inc. is one vendor that 
| has repurposed its product for privacy ee ee 


PRODUCT ROUNDUP 


Check out this sampling 

of vendors offering privacy 
compliance monitoring tools: 
© QuickLink 42102 
www.computerworld.com 


ey en 


| 
| 
compliance. Coast’s Web Quality Central 
ty testing tool for Web sites, is now mar- 
keted as a tool for monitoring privacy 


compliance. 
Go Jobs Inc., a Newport Beach, Calif.- 


Jobs’ 50,000 Web pages, searching for privacy issues 


| such as pages missing a P3P privacy policy, pages 


with links containing personal information and pages 


| with potentially dangerous data leaks. 


The reports generated give Go Jobs a detailed 


| overview of the company’s privacy compliance, as 
| well as Web site accessibility and operational securi- 
| ty standards, says Jonathan Duarte, president of the 


online job board. 
“Privacy is a primary concern for us,” Duarte says. 


A TOOL FOR 


Many vendors offer privacy compliance tools, 
but each product addresses a different area of 
compliance. 


WEB WATCHERS 

These products let administrators scan Web pages for P3P 
privacy policies, cookies and Web beacons used for tracking 
users; information collection practices; and links to other 
sites that could compromise privacy. Watchfire and Coast 
Software, for instance, aim to help companies monitor Web 
site content and activity for privacy compliance. 


TRAFFIC MONITORS 

Others vendors, such as Vericept and start-up Vontu, offer 
network content tracking products. Vericept's VIEW for Priva- 
cy Protection, for instance, uses linguistic and mathematical 
analysis to scan the network for content - such as primary 
health information or employee data - that doesn’t comply 
with an organization's privacy policies or security boundaries, 
says product manager Roger Brown. The noncompliant data 
is logged, copied and reported. Vontu’s product is designed 


www.computerworld.com 


With about 7,000 visitors to the site daily, any com- 
promise of personal information “could put us in a 
world of financial hurt. Coast’s software is our insur- 
ance policy,” he says. 

Likewise, Alpharetta, Ga.-based CipherTrust Inc. is 
repositioning its IronMail antispam and antivirus 
product as a tool for controlling the use of encrypted 
e-mail at companies in industries affected by HIPAA 
or Gramm-Leach-Bliley. 

Baptist Health is using IronMail’s policy manager 
to scan each incoming and outgoing message on the 
hospital system’s networks for specific words, phras- 
es or attachments. It can intercept and hold any 
e-mail containing protected patient information. 
Administrators can then let the message pass 
through to the recipient or block it. 

“TronMail has helped us to identify users in the 
hospital who are relaying patient information to peo- 
ple outside of the corporation [without adequate 
safeguards]. Before, we didn’t have a way to grab that 
information,” says Boggess. 

Vendors of content protection soft- 
ware such as Waltham, Mass.-based 
Authentica Inc., Boston-based Sealed- 
Media Inc., and Palo Alto, Calif.-based 
PSS Systems Inc. are also rushing privacy 
compliance products to market, says 
Joshua Duhl, an analyst at Framingham, 
Mass.-based IDC. 

Such products focus on postdelivery protection of 
documents and Web content via encryption and the 
enforcement of policies related to how the data is to 
be accessed, stored, copied or printed. 

“Compliance is probably the best opportunity that 
these vendors have had to provide value with their 
products,” Duhl says. “All of the digital rights man- 
agement vendors have some sort of story around 
compliance, whether it be the fact that they are doing 
encryption of the data or making sure there is no 


leakage of information.” @ 42105 


more to prevent insider abuse and looks for specific pieces 
of proprietary information leaving the organization by e-mail, 
FTP or chat session, says Doug Camplejohn, a company 
vice president. 


CONTENT CHECKERS 

Still other products are designed to protect content. Products 
from vendors such as Liquid Machines and Authentica allow 
companies to enforce privacy policies at the content level. 
The tools enable companies to allow or prevent actions such 
as reading, altering, copying and printing data based on a 
user's privileges for that document. 


TRANSACTION TRACKING 

One of the crucial differentiators in IBM's Tivoli Privacy 
Manager technology is its focus on real-time privacy enforce 
ment. The middleware product uses privacy policies to con- 
trol real-time access to database information from the appli- 
cation layer. With it, companies are able to enforce and audit 
policies related to how and when critical data can be ac- 
cessed and used. 





“At last I’m free, thanks to 
Nokia Mobile Connectivity — 
solutions...and it feels great, 
exclaims Mary Langer, 

office manager. 
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Introducing a new era of secure, corporate business freedom 
and flexibility — Nokia Mobile Connectivity solutions. 


Employees throughout an enterprise want to be 
more mobile and productive — and this can be 
realized thanks to Nokia Mobile Connectivity solutions. 
(10s and IT managers can provide the mobility and 
security of anytime, anywhere access to users — 
while empowering everyone from the CEO to field 
salesforce teams with the information needed to do 
their work where and when they choose. Nokia 
Mobile Connectivity solutions include a range of IPSec- 
and SSL-based client and gateway products that 


CONNECTING PEOPLE 


provide secure, appropriate access to corporate 
email and applications. Enterprises will discover new 
levels of efficiency from their workforce, while 
giving them greater freedom to manage their business 
and personal lives. All solutions are easy to deploy 
and manage, are based on award-winning technology 
and are backed by Global Support and Services. 

So if you want greater working freedom that’s IT 
approved, go ahead and escape. 

Visit www.nokia.com/mobileaccess/americas 
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HOW CLOSE ARE YOU TO THE 
NEXT GENERATION OF NETWORKING? 


THE ANSWER IS JUST BENEATH THE SURFACE 


Within your desktops, notebooks, switches and servers are chips enabling your business to operate in real time, delivering Gigabit 
speed both reliably and securely. When the top 10 computer and networking equipment brands need unsurpassed performance, 
they turn to us.' Broadcom® chips are two to three times faster than the closest competitor’s in delivering network throughput on 


your demanding applications.? Whether you’re wired or wireless, networking hardware built with Broadcom technology ensures 


the devices you use today—as well as those you add tomorrow—will connect easily and seamlessly across air, fiber and copper. 


, vk 
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Learn how building upon Broadcom” chips end-to-end 
can provide you with faster network performance 
Download the first two chapters of our new e-book 
“Architecting Next-Generation Networks” now at 
www.computerworld.gobroadcom.com/ebock 
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YSIA BENFORD’s problem was 
empty trucks. After delivering 
animal feed to farmers, trucks 
from her company, Associated 
British Nutrition and Agri- 
products Ltd., returned with- 
out a load. On the way back, 
they often met or passed other trucks picking up 
products the same farmers were selling to ABNA. 

The fact that ABNA’s customers were also some- 
times its suppliers created an opportunity to elimi- 
nate some of those 2,000 daily trips, streamline sup- 
ply chain operations and reduce the $100 million an- 
nually spent on logistics. “If you can minimize empty 
running, you can take costs out — that was one of the 
main drivers for this,” says Benford, group informa- 
tion systems and logistics director at ABNA in Peter- 
borough, England. 

The challenge was how to integrate a logistics op- 
timization system with ABNA’s customer, account- 
ing, trading and business systems (some from acqui- 
sitions), running under Unix, Hewlett-Packard Co.’s 
OpenVMS and Microsoft Corp.’s Windows NT. Be- 
cause users liked these best-of-breed applications, 
Benford rejected installing a monolithic ERP system. 

She took what she judged to be a simpler, cheaper 
route: a bus architecture using messaging routers to 
connect those major systems and enable them to 
share information — an integration technology now 
called the enterprise service bus (ESB). “The mes- 
saging approach seemed to be the best solution... 
and it didn’t cost a fortune,” says Benford, who 
worked with Sonic Software Corp. on the ESB. 

ABNA and other early adopters of the ESB ap- 
proach, such as General American Corp. and Central 
Hudson Gas & Electric Corp., are seeking the follow- 
ing benefits: 

@ interoperability — the ability to interconnect ap- 
plications and systems across messaging platforms 
and operating systems. 

@ Lower costs: What in the past might have been 
multimillion-dollar integration projects can cost 
one-fourth to one-third as much as they once did. 

& Simpler development models that rely on stan- 
dards and are suited to generalist developers. 

®@ Services-oriented architecture, which can har- 
ness Web services capabilities. 

Turning to integration to streamline operations 
and save money is nothing new, but today’s tightened 
IT budgets have pushed the trend, says Steve Craggs, 
a consultant at Saint Consulting Ltd. in Hampshire, 
England, who is vice chairman of the EAI Industry 
Consortium in Calgary, Alberta. What’s new is the 
messaging technology approach and its ability to re- 
tain 80% of the power of existing enterprise applica- 
tion integration (EAI) system and add increased ca- 
pabilities at a comparatively low cost. 

“What’s really tipped the ESB is the emergence of 
stronger standards, especially for XML, JMS and 
Web services,” says Roy Schulte, an analyst at Gart- 
ner Inc. in Stamford, Conn., and the originator of the 
ESB designation. Improvements in publish-and-sub- 
scribe technology and middleware as well as faster 
networks have boosted real-time connectivity across 
heterogeneous environments, but it has taken the 
ESB approach to bring together what Schulte calls 
the “enterprise nervous system.” He predicts that “a 
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Although the technology is still being developed, some 
companies are already using an enterprise service bus to 


solve problems and save money. By Connie Winkler 


majority of large enterprises will have an enterprise 
bus running by 2005.” 

“Companies need deeper integration beyond Web 
services and XML,” says Eric Newcomer, chief tech- 
nology officer at Dublin-based Iona Technologies 
PLC, which is moving toward an ESB model. 


BA, application servers, Microsoft .Net and IBM 
products such as [WebSphere MQ] — but none of it 
talks to the other.” 

Other organizations are using ESBs to extend inte- 
gration to other departments or functions. “Having 


mission-critical applications on EAI doesn’t stop 


them from the cheaper ESB approach,” adds Craggs. 
Generally speaking, an ESB is a modular middle- 

ware layer passing data between applications and 

systems via a bus (or ring) architecture that has a 


Bus-related messaging engines that 
provide transformation, XML and 
intelligent routing services, and the 
communications bus itself 


Definition tools and repository services 


Administration and management 
services 


Support for standard forms of 
connectivity, such as Web services 


Adherence to industry standards 





core asynchronous messaging backbone with intelli- 
gent transformation and routing for reliability. This 
contrasts with the traditional hub-and-spokes inte- 
gration model with passive nodes and intelligent 
hubs. The ESB depends upon standards-based tech- 
nologies — typically, but not always, Java Message 
Service (JMS), Java 2 Enterprise Edition (J2EE) con- 
nectors and/or XML document exchange capability. 

Services deployed at each application plug into the 
bus via standards-based connections. Applications 
can be activated from or to anywhere on the bus, 
without having to go through a central hub. Despite 
the reliance on standards, however, vendors have 
chosen different messaging approaches and features 
in their ESB bundles. To simplify ESB projects, ven- 
dors have added development consoles or dash- 
boards using Java and drag-and-drop features. 

ESBs are the “next-generation middleware” that 
will deliver the same level of integration to midsize 
companies that larger companies have gotten from 
application servers for years, says Dennis Byron, an 
analyst at IDC in Framingham, Mass. “What you’re 
seeing is the natural trend: As technology becomes 
more mature, it provides the same capability at the 
lower end of the market and at lower price points.” 

Several ESB suppliers start single-server licenses 
at $12,500 to $25,000, although major systems cost 
about $250,000, plus $150,000 for customization. Still, 
this represents a fraction of the cost of EAI imple- 
mentations. The hang-up with EAI isn’t the purchase 
price, explains Byron, but the long implementation 
times needed by pricey consultants. “A $50 million 
company can’t afford $2 million to customize and im- 
plement a proprietary solution,” he says. 

Nor has it hurt that ESBs can be implemented as 
projects. “Even though customers envision a perva- 
sive integration network across their enterprises, the 
funding model today is project-based. Customers 
buy ESB incrementally,” says Gordon Van Huizen, 
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CTO at Sonic Software, a Bedford, Mass.-based ESB 
vendor. 

Even for relatively big integration efforts at large 
companies, ESB is paying off, early users say. For ex- 
ample, ABNA, a $1.95 billion arm of $7.2 billion Lon- 
don-based Associated British Foods PLC, had esti- 
mated that its IT integration effort could cut 5% to 
10% off a $100 million annual shipping bill; the proj- 
ect has cost about $2.8 million for development, soft- 
ware and hardware. “That’s no-brainer ROI,” says 
Benford. “We are proving the technology will work, 
and we are starting to deliver those savings.” 

ESB technology has also given ABNA a shipment 
status notification system in addition to electronic 
data interchange, and that’s important because im- 
proved shipment documentation is required as part 
of the U.K.’s battle against mad cow disease. 


Development Simplified 

Much of the savings on ESB projects comes from the 
relative simplicity of ESB development models and 
tools. “Because we’re standards-based, you’re writing 
code to a standard and at the business level,” says 
Ronan Bradley, CEO of Dublin-based PolarLake Ltd., 
which sells the JIntegrator ESB. “We hide all that 
[complexity] within the platform.” 

And since development is simpler, fewer program- 
mers are needed — and they can also be skilled in 
Java or XML instead of being specialists in propri- 
etary products. “It needs a few people who are highly 
skilled, but not an army of them — we're seeing [de- 
velopment] teams that are smaller,” says Steve Field, 
practice director of enterprise integration at Tier] In- 
novation LLC, a systems integrator in Denver. 

In was development hassles that led General 
American Corp., which provides appraisal and title 
services for the real estate industry, to consider ESB 
technology. Whenever one of its thousands of mort- 
gage bank customers requested an electronic link-in, 
Pittsburgh-based GAC had to shut down its systems, 
which run a Sybase database and Windows 2000. 

“We'd go through this entire project of mapping 
data fields back and forth, testing, and actually shut 
down just so we could update our systems to support 
this new interface,” says Chris Behning, senior vice 
president and CTO at GAC. 

Last month, GAC went live with Tifosi Enterprise 
Integrator from Fiorano Software Inc. in Los Gatos, 
Calif. After reviewing integration products from 
IBM, Sybase Inc. and others, GAC decided it liked 
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J2EE 


application 


An ESB provides a mes- 
saging backbone that 
extends messaging- 
oriented middleware 
(MOM) functionality 
across ail of the services, 
systems and applications 
that a company uses. 


Enterprise 
service bus 


Web service 


(Vendor 1) 


| Tifosi’s simplified development model and dash- 


board for designing and deploying the application. 


| GAC tried a proof-of-concept model before installing 


the $250,000 Tifosi system companywide. Behning 


| also likes the ESB’s Web services capability because 


GAC can use it to set up a standard way for cus- 
tomers to do their own link-ins in the future. 
Any ESB discussion quickly turns to Web services. 


| “ESBs will be the primary implementations of Web 


services. ESBs are how you are going to get Web ser- 


| vices, vs. competing with Web services,” Schulte says. 


And the ESB marketplace will get busier. “With 
IBM and Microsoft preparing to offer ESBs, this con- 


cept will take off quickly,” says Schulte, referring to 


Microsoft Corp.’s rumored Indigo product and IBM's 
plans to offer an ESB next year [QuickLink 42341]. 

IBM executives suggest that their services bus will 
be a variation of the existing WebSphere MQ mes- 
saging platform. Interest in the ESB has also spawned 
a large handful of suppliers and has existing pro- 
viders announcing new or recast products. 

When Central Hudson Gas & Electric needed ESB- 


| style integration, it chose to work with its vendor of 


20 years, Software AG Inc. in Reston, Va. The Pough- 
keepsie, N.Y.-based utility needed an Internet cus- 
tomer billing and information system and a way to 
better feed outage reports into a new storm manage- 
ment system from GE Power Systems in Schenec- 
tady, N.Y. “Our goal was to improve customer service 
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| by providing self-service over the Internet and 


through an outage management system that predicts 
the cause of power outages reported by customers,” 
says Central Hudson IT manager Gary Wright. 

For Central Hudson, each customer call offloaded 
to the Internet saves $6 to $7. “Of the 720,000 calls 
received per year, we estimate 10% can be answered 
online for a potential savings of $500,00 a year or 
more,” Wright says. “We’re not looking to reduce 
staff; our goal is to reduce costs so we can manage 
growth without increasing resources.” 

Although Wright considered other integration op- 
tions, Software AG’s EntireX has the messaging com- 
munications, and its Tamino product has the XMI 
server capability to connect Web documents. Soft- 
ware AG has long had adaptable messaging and inte- 
gration, but now its technology matches the ESB 
buzzword, says Joe Gentry, the vendor’s senior direc- 
tor of product marketing. 

Customers don’t call to buy an ESB: “They call and 
describe a challenge — to send information from 
multiple back-end systems to business partners, or 


| they want to provide a Web interface combining data 


from multiple sources or that enables customers to 
manage their accounts,” Gentry says. “Right now, 
that’s called an ESB.” @ 42253 


Winkler is a freelance writer in Seattle. She can be 
reached at winklerconnie@yahoo.com. 
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2. Automatic shipping of sale. 
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BY RUSSELL KAY 
S MORE AND MORE 
enterprises use project 
teams with members 
based in different loca- 
tions and time zones — often 
in different countries or hemi- 
spheres — their need for ef- 
fective electronic collabora- 
tion tools has grown dramati- 
cally. There are a number of 
products that aim to solve that 
problem, and most make at 
least some use of a single un- 
derlying technology. 

Web-based Distributed Au- 
thoring and Versioning (Web- 
DAV or, more often, just plain 
DAV) is a standard that ex- 
tends the capabilities of 
HTTP 1.1, the underpinning of 
the World Wide Web. 

HTTP lets users read con- 
tent that has already been 
published on the Web, but it 
provides no simple way for 
users to post new content or 
edit existing Web documents. 

The protocol has no stan- 
dard method for moving a file, 
locking or unlocking it, or 
adding property information 
to the file. WebDAV standard- 
izes all of those functions, 
making the Web writable as 
well as readable in an inter- 
operable way. 

WebDAV was first proposed | 
in 1996, and the current stan- 
dard, RFC 2518, was published 
by the Internet Engineering 
Task Force (IETF) in February 
1999. Versioning extensions to 
WebDAV were codified in 
RFC 3523 in March 2002. 


Diving into DAV 
WebDAV extends HTTP by 
adding new functions, includ- 
ing the following: 

@ Delete: for deleting a docu- 
ment or other resource. 

® PropFind and PropPatch: for 
reading and writing metadata 
(also called properties) for a 
resource. 

@ MkCol: for creating a new 
DAV collection (think of fold- 
ers for organizing files). 

@ Copy and Move: for copying 
or moving a resource. 

@ Lock and UnLock: for pro- 
tecting editing changes when 
multiple users access the same 
document. 

@ CheckOut and Checkin: for 
enabling version control and 





| quests, so WebDAV 


| properties. WebDAV 
| version control also 
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WebDAV 


PTLON: 


Web-based Distributed Authoring 
and Versioning (WebDAV) is a stan- 
dardized, platform-independent 
set of extensions to HTTP 1.1 
that allows users to collaborate 
over the Internet by editing and 
managing files remotely. 


revision tracking. 
HTTP headers aren’t long 
enough to handle some re- 


uses XML to format 
such requests and to 
store all resource 


makes it possible for 
users to know which version 
of a file is the most current. 


| WebDAV at Work 


Let’s say you're collaborating 
on an engineering project 
with two or more groups in 
distant locations. You proba- 


| bly use e-mail to communicate 


with one another about the 
project’s status, and you send 
document revisions back and 
forth, with everyone hanging 
onto copies. 

If you’re lucky, your organi- 
zation has a document man- 
agement or collaboration sys- 


| tem to help keep things orga- 


nized, as well as a version- 


| control system to help track 
changes. But what if you don’t 


have those resources? 

With WebDAV-compliant 
software, team members can 
edit Web documents stored on 
a common Web server that’s 
accessible on your network 


| and over the Internet (safe- 
| guarded as needed by fire- 
| walls and virtual private net- 


works) from any member’s 
browser or other software. 

A file-locking mechanism 
prevents one person from ac- 
cidentally overwriting anoth- 


uIcK = 
uy" 





er’s changes when they are 
working on the document at 
the same time. And you can 
limit access rights, 
store versions for later 
retrieval and maintain 
metadata such as au- 
thorship and modifica- 
tion dates. 

San-Francisco-based 
Xythos Software Inc. has a 
content-management product, 
WebFile Server (WFS), that 
combines WebDAV and Se- 
cure Sockets Layer encryption 
to allow controlled remote ac- 
cess to unstructured docu- 
ments. This has been used by 
a number of health care 


| providers in meeting the re- 


| strong inroads into Web infra- 


| agement systems from Docu- 


| clude Microsoft’s Office XP, 





quirements of the Health In- 
surance Portability and Ac- 
countability Act. 

Users can access documents 
via WES, which enforces per- 
missions and provides secure 
remote access. WFS can also 
track all views and changes to 
a specific document and inte- 
grates into many desktop ap- 
plications, including Microsoft 
Corp.’s Office. 


Interoperability 


WebDAV has been making 


structure products. 

The two leading Web 
servers — Apache and Micro- 
soft Internet Information 
Server — are compliant, as are 
document and content man- 


mentum Inc., Vignette Corp. 
and BroadVision Inc. 

Other popular software 
tools that support DAV in- 


Office 2003 and SharePoint 
Portal Server, as well as 
Macromedia Inc.’s Dream- 
weaver, and Adobe Systems 
Inc.’s GoLive and Acrobat. 
WebDAV functionality is 
embedded in operating sys- 
tems including Windows 
(from Windows 95 onward), 
Apple Computer Inc.’s Mac 
OS X and Novell Inc.’s Net- 
ware. Windows XP’s integrat- 
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ed support enables any appli- 
cation running on it to be 
WebDAV-enabled. 


DAV’s Future 


In many organizations, static 
documents have evolved into 
active documents and interac- 
tive forms over corporate net- 
works. With WebDAV support 
widely available, Web author- 
ing is also likely to expand 
from local Web servers and in- 
tranets to encompass the en- 
tire Web, simply because new 
software will support seam- 
less collaborative authoring. 
The DAV Searching and Lo- 
cating (DASL) group, which is 
related to the IETF, is working 
to develop a way to search a 
WebDAV-compliant reposito- 
ry on any platform. The DASL 
technology’s main function 
will be the ability to search for 
Web resources based on their 
properties and text content. 
Another working group is ad- 
dressing the issue of access 
control. @ 42130 
Kay is a Computerworld con- 
tributing writer in Worcester, 
Mass. You can reach him at 
russkay@charter.net. 


Are there technologies or issues you'd like 
to learn about in QuickStudy? Send your 
ideas to quickstudy@computerworld.com 


To find a complete archive of our 
QuickStudies, go online to 
@ computerworld.com/quickstudies 
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1) User accesses WebDAV 
file through an application, 
Web browser or file- 
management utility. 


2) The file can be accessed 
over any type of network 
connection - LAN, WAN 
dial-up, VPN or wireless 
LAN, for example. 


3) Security is achieved 
using Secure Sockets 
Layer or VPN encryption. 


4) Servers enforce per- 
missions and respond to 
requests to, for example, 
open and edit files, browse 
the directory or create, 
rename, delete or copy 
files. 


5) Multiple users can ac- 
cess and edit the same file 
securely and concurrently. 


WebDAV in Use 


Some applications 
that suport it: 

= Microsoft Excel 
= Microsoft Word 


End user 
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Rogue Access Poin 
Leads to Embarrassment 


An unauthorized and undetected wireless 
access point lets a visitor into the corporate 
LAN. By Mathias Thurman 


Y COMPANY is now 

down one employee. 

The person I wrote 

about last time 
{QuickLink 41938], who au- 
thorities suspected was using 
his workstation to trade child 
pornography, was escorted 
from the premises last week. 

Since receiving the search 

warrant that led to his dis- 
missal, I haven’t heard any- 
thing from the inves- 
tigators, but I’m sure 
the guy is in big trou- 
ble. We had a chance 
to analyze the image 
of his hard drive, and 
there were extensive 
directories with dif- 
ferent categories of porn. Not 
that you’d notice unless you 
opened the files: He had saved 
almost all of the images with 
innocuous-sounding file 
names. I’m sure this was done 
to bypass our filters, which 
detect files that have words re- 
lated to pornography. I don’t 
think my company will suffer 
any loss as a result of this guy’s 
departure, as he seems to have 
spent most of his time at work 
on his illicit collection. 


Surprise Guest 

This week I received a mes- 
sage from a friend of mine who 
works for a vendor my compa- 
ny uses. He suggested that my 
security team and I review our 
wireless policy, because he 
was able to connect to our 
corporate intranet via an open 
wireless access point while 
visiting another department 
recently. This was both sur- 
prising and embarrassing, 
since we have established a 
policy on wireless LAN use 
and thought we had rooted out 
problem devices months ago. 
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| I called my friend, and he 
| said he had been visiting one of | 
| our software development cen- 
| ters to give a demonstration of 
| his company’s debugging soft- 
ware when he noticed a prob- 


| lem. During the presentation, 


his personal firewall started 
popping up messages, asking 
for permission to allow con- 
| nections to the Internet. 
But he wasn’t physically at- 
tached to the net- 
work and was in the 
middle of giving a 
PowerPoint presen- 
tation. After the 
meeting, he did 
some checking and 
noticed that his lap- 
| top’s integrated WLAN 
| adapter had automatically 
| connected to an access point 
in our facility. The Service Set 
Identifier code on that access 
| point was set to the default 
name “default” with no en- 
| cryption enabled, so he had 
| unfettered access to our cor- 
| porate intranet. 
My team and I try to be 
| proactive in monitoring for 
these problems. We use the 
| AirWave Management Plat- 
| form from AirWave Wireless 
Inc. in San Mateo, Calif., in 
combination with access 
points from 3e Technologies 
International Inc. in Rockville, 
Mad., to scan for rogue devices. 
| But we use it only at our cor- 
| porate headquarters. We don’t 
| have the budget to purchase 
| this infrastructure for remote 
| offices such as the software 
| development center. 
I called the IT manager at 
| the software development 
| center, shared the story from 
my friend and asked him if he 
| knew of any authorized wire- | 
| less access points there. The 


| 
| 
| 
| 
| 





manager said he installed two 


| access points about a year ago 


but said he had removed them 


| when our WLAN policy came 


out several months ago. None- 


| theless, he agreed to walk 


around his facility to search 


| for the rogue access point. 


The manager’s search 


| turned up nothing, so I packed 


up our AirMagnet Handheld, 
which we bought from Moun- 
tain View, Calif.-based Air- 
Magnet Inc., and sent it to him 
by courier. Two days later, I 
walked him through operating 


| the device. He immediately 


picked up a single wireless 
signal and tried to locate the 
access point using the signal 
strength meter. However, be- 
cause of the construction of 
the building, he was unable to 
pinpoint the device's location. 


Backtracking 


The next step was to try to 
locate the access point via the 
Media Access Control (MAC) 
address on the switch to which 
it was connected. Every net- 
work interface card (wireless 
or not) has a unique hardware 
address. The first three octets 
identify the vendor, and the re- 
maining characters provide an 
ID number. Since the access 
point was “open,” meaning no 
encryption or other access 
control was enabled, the man- 
ager could use the AirMagnet 
device to associate to the ac- 
cess point. And since I already 
knew the MAC address of the 
wireless PC Card installed in 
the Compaq iPaq that runs the 
AirMagnet software, we could 
trace that back through our 
network infrastructure. 

I called the network engi- 
neer responsible for the 
switch at the development 
site, gave him the iPaq’s MAC 
address and asked him to con- 
duct a search of the switch 
ports. A few hours later, he 
called back with the informa- 





tion: Cat Switch 02, Blade 4, 
Port 8. The network engineer 


then gave me another MAC 


address — the one for the 
wireless access point. The ac- 
cess point acts as the hub for 
wireless devices, so both the 


| access point and the device 


share the same switch port. 
The IT manager at the site 
then had the facilities manager 
trace the Ethernet connection 
from the switch port to the 
patch panel. Then, using a 
map, he determined the exact 
location of the suspected wall 
jack. It was in a cubicle be- 
longing to one of the software 


engineers. The offending de- 


vice was a Linksys access point 


| that the engineer had pur- 


chased for $79 at Wal-Mart. 
The user hadn’t seen our 
wireless policy and didn’t 
know about security configu- 
rations or the ramifications of 
installing an unauthorized, 
misconfigured access point. 
He had simply installed the 
device as a convenience. The 
facilities manager removed 
the access point and gave the 
engineer a copy of our policy. 
Other than mentioning the 
incident to his supervisor, 


| there was nothing else to do. 


One lesson I learned is that 
after we issue a security poli- 


| cy, we should follow up with 


regular reminders. We’ll also 
make some changes to our 
employee orientation program 


| to include a short discussion 


on current security policies 
(especially wireless) and to 
reiterate existing policies and 
acceptable-use guidelines. D 


WHAT DO YOU THINK? = 


This week's journal is written by a real securi- 
ty manager, “Mathias Thurman,” whose 
name and employer have been disguised for 


obvious reasons. Contact him at mathias_ 


thurman@yahoo.com, or join the discussion 


| inour forum. QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 
© computerworld.com/secjournal 


| 
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Security Bookshelf 


Stealing the Network: How to 
Own the Box, by Ryan Russell, 
(ed.), Ido Dubrawsky; 
Syngress, 2003. 
Unlike most of the 
security-related 
books I read, this 
book is fiction. It’s a 
series of stories, each 
of which is about 30 
pages, that take the 
point of view of a hacker as he 
sizes up and hacks into differ- 
ent infrastructures. Although 
the scenarios are fictitious, 
the techniques used are real. 
The hacking tools and meth- 
ods discussed cover every- 
thing from routers to sniffing 
the traffic from BlackBerry 
devices. The authors offer an 
interesting perspective. Plus, 
the book is a fun read. 

- Mathias Thurman 


Reactivity Offers 
XML Firewalls 
Reactivity Inc. last week intro- 
duced a family of security ap- 
pliances designed to secure 
Web services applications. 
The Belmont, Calif.-based 
security vendor's new XML 
Firewall 2300 series is aimed 
at helping companies avoid 
threats such as XML denial- 
of-service attacks, said the 
company. Pricing for the fire- 
walls starts at about $50,000. 


ESM Security Too! 


Symantec Corp. last week an- 
nounced Enterprise Security 
Manager (ESM) 6.0, the latest 
edition of the Cupertino, Calif.- 
based company’s vulnerability 
assessment and policy com- 
pliance tool. The upgrade is 
designed to help IT adminis- 
trators compare their net- 
works’ security against indus- 
try benchmarks, Symantec 
said. ESM 6.0 is available 
now. ESM Manager software 
sells for $2,394. ESM agent 
software is priced from $114 
for an agent that runs on Win- 
dows or Unix workstations to 
$1,995 for an agent that runs 
on iSeries servers. 
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1. Verifies insurance on the spot. 

2. Files digital claim in an instant. 
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New Apps Assess 
Compliance Risks 


Providus Software Solutions Inc. 
has introduced new versions of 
its two risk management applica- 
tions for Sarbanes-Oxley and 
Basel Il regulatory compliance. 
The products provide financial in- 
stitutions with a top-down view 
of potential risks across lines of 
businesses, according to Nashua, 
N.H.-based Providus.The Risk- 
Resolve 3.0 applications are built 
on Microsoft's .Net Framework 
for Web services and provide 
users with workflow and permis- 
sion capabilities for entering, 
viewing, tracking and reporting 
on risks and risk-related data. 
Pricing ranges from $50,000 to 
more than $300,000. 


| 
| 
| 
| 


Suite Monitors Web | 


App Performance 


Visuaiware Inc. in Turlock, Calif., 
last week introduced Desktop 
Management Suite, a set of four 
applications to track and manage 
Internet application performance. 
The components are designed to 
measure the time it takes a Web 
page to be received by a user; as- 
sist help desk staffers in spotting 
problems between a server and a 
customer desktop; help tech sup- 
port workers check a customer’s 
desktop configuration; and mea- 
sure and report on the status of 


services from an application serv- | 


er to a customer location. Pricing 
starts at $28,450. 


Cray’s Red Storm 
To Go Commercial 


Cray Inc. next year plans to re- 
lease a commercial system based 
on its Red Storm supercomputer 
at the Sandia National Labora- 
tory in Albuquerque. The 10,000- 
processor, Linux-based system - 
which costs approximately 

$90 million - is capable of oper- 
ating at 40 trillion calculations 
per second. Seattle-based Cray 
also said last week that it will 
use the Opteron chip from Ad- 
vanced Micro Devices Inc. for 
the commercial version. 
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CIOs Share the Blame 


LIVELY DEBATE has been generated by 
the recent report “CyberInsecurity: The 
Cost of Monopoly,” produced by, among 
other credible security experts, Daniel 
Geer, Charles P. Pfleeger and Bruce 
Schneier. The vulnerability of any monoculture — the 
central theme of the report — was noted here five 
years ago [“Microsoft a U.S. Security Threat,” Nov. 30, 


1998, QuickLink a3770]. 

While the paper makes 
the case for Microsoft’s cul- 
pability in magnifying secu- 
rity risks, that’s only a par- 
tial explanation of the situ- 
ation we’re in. Something 
must be said about the con- 
duct of IT managers who 
have ignored rising security 
threats. 

As microcomputers ac- 
quired mainframe power, 
tens of millions of amateurs 
got hold of the capacity to 
mess up systems in ways 
that previously were avail- 
able only to professional program- 
mers. As a result, security has now 
become the main inhibitor to further 
computerization. IT management 
should shoulder part of the blame for 
several reasons: 

1. Abdication. When desktops first 
showed up, CIOs were pleased that 
they could unload the burden of satis- 
fying rising demands to enthusiastic 
amateurs whose costs could then van- 
ish into administrative expenses. Com- 
plaints about a lack of service could be 
unloaded to where they couldn’t re- 
flect on the CIOs’ difficulties in deal- 
ing with technological innovation. 
For example, when the U.S. Navy and 
Marine Corps set out to harness un- 
controlled desktops, they found over 
100,000 “legacy” applications instead 
of the 2,000 they expected to find. 
Seizing control is now difficult be- 
cause most of the useful work is done 
on local applications and not through 
services provided by the Navy/Marine 
Corps CIO. 





vices started connecting 
to the Internet, CIOs toler- 
ated the widespread prac- 
tice of jump-starting local 
application services with 
few security safeguards. 
For this lack of security 
leadership, the CIO re- 
ceived accolades from 
computer magazines with- 
out much accountability 
for consequences. 

Three years ago, much of 
the federal administrative 
bureaucracy became a 
Web-page development 

shop. When I got to NASA, I asked for 
a count of Web addresses in the orga- 


| nization; we stopped at 2,904 and 4.3 


million individual pages. Much of the 
most effective work in using comput- 
ers as a tool for collaboration and 
communication was done outside of 
the organizations that the CIO was 


| supposed to guide. 


3. Negligence. In the past decade, 
CIOs, allied with enthusiastic corpo- 
rate executives, diverted their atten- 
tion from managing the total costs of 
computing to lobbying for incremental 
funds for attention-grabbing technolo- 
gies, such as client servers, enterprise 
systems or Web services. Such proj- 
ects could be managed as separate 


| tasks and were presented to corporate 
| executive as isolated commitments. 


While concentrating on appealing 
innovations, organizations neglected 
to make investments in the reliability 
and the security of the infrastructure. 
I blame the CIOs for not making the 
case for the necessary funding to im- 


2. Absenteeism. When computing de- | plement networkwide security be- 





cause that would have required the 
imposition of an enterprisewide disci- 
pline. Thus, the CIOs ended up man- 
aging only what they had a charter to 
manage, which was a shrinking share 
of the total cost of IT. With such dilu- 
tion of CIO power, nobody stepped up 


to impose order on the desktops be- 
| ° 
cause that was just too hard to do, was 


politically unpopular and was a losing 
proposition from a budgeting stand- 
point. Increasingly decentralized com- 


| puting devices were allowed to infil- 


trate an increasingly rickety shared 
infrastructure without any safeguards 
that might prevent the inevitable secu- 
rity collapses. 

The time has come to pay for dec- 
ades of unsafe computing. And the 
price will exceed the cost of meeting 
the Y2k threat. Executive management 
will now insist on the following: 

w A complete accounting of the se- 
curity of every computing asset and 
every conceivable entry point into an 
organization’s network. This will in- 
clude all portals, operating systems, 
routers, switches, wireless devices, 
firewalls and modems, as well as all 
data entry applications. 

= Certification that there is a 100% 
enforcement of real-time authentica- 
tion and authorization of access to 
files, to operating software and to 
applications. 

# Government certification that the 
custody and retention of all transac- 
tion records meets worst-case contin- 
gency scenarios. 

Through abdication, managerial 
absenteeism and negligence, we have 
ended up with millions of insecure 
mainframes on desks and laptops, and 
in briefcases. Microsoft profited from 
providing software that can be best 
characterized as trying to serve all, at 
all times. Nevertheless, the lack of 
adult supervision and accountability 
from CIOs also deserves a share of 
the blame for the current deplorable 
state of insecurity. @ 42431 
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1. Shares credit rating. Now. 
2. Responds to mortgage broker. Now. 
3. Confers with local branches. Now. 


4. Approves loan with supervisor. Now. 


5. Does it all on one platform. Now. 
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Developing IT 

Skills “To Go’ 

A national apprenticeship 
program combines class- 
room and on-the-job 
learning to help IT 
workers bring their skills 
up to speed. Page 44 


MENT 


OPINION 


Satisfying IT Customers 
May Be a Bad Idea 


Paul Glen (right) says the clients 


BOOK EXCERPT 


< - Get Sales Chiefs 
On Your Side 
Sales managers can make or break 
a CRM or sales force automation 
project, so it’s important to ensure 
that they’re enthusiastic support- 
ers of such efforts. Page 46 











of IT departments are seeking 
expert counsel and a good ex- 
perience, not a fast transaction 
or beautiful code. Page 48 
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As the CIO of an 
automotive joint 
venture, Joel 
Gruber has to 
work with four 
ClOs looking 
over his shoulder. 
By Kathleen 


Melymuka 





“| had to assert that this is my 
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or break it,” says Joel Gruber, 
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late to one another. “The 
defined,” Gruber recalls. 


RouteOne LLC 


Mission: To create a 
common, Web-based 
credit application proc- 
ess for more than 
22,000 automotive 
dealerships. 

Four equity partners: 
@ DaimlerChrysler Ser- 
vices North America LLC 


@ Ford Motor Credit Co. 


® General Motors 
Acceptance Corp. 






HEN JOEL GRUBER BECAME CIO at 
RouteOne LLC, a joint venture of 
four major automakers, he found 
himself with more help than he 
had bargained for. The CIOs of 
the partner companies — his advisory board — were 
»d, senior people with more experi- 
ence than he had. No one was quite sure how to re- 










situation was really ill- 


As a result, his first days 
were filled with too much 
advice, too much discussion 
and too few decisions — un- 
til he took charge. “I had to 
assert that this is my show 
to run and my job to make 
or break it,” he says. “I'd say, 
‘T’ve heard all your input. 
Now we'll do it this way.’ ” 

Between 199] and 2001, 
joint ventures increased 
sevenfold, according to the 
MIT Sloan Management Re- 
view (Summer 2003). CIOs 


ers 


in these hybrid organiza- 
tions need to learn new 
survival skills: to serve the 
start-up venture, but also 
the founding partners; to leverage the IT expertise of 
the partners without being overwhelmed by them; 
and to assert their own authority or cede it. 
Southfield, Mich.-based RouteOne is a joint ven- 
ture of the credit arms of the Big Three automakers 
— DaimlerChrysler Services North America LLC, 
Ford Motor Credit Co. and General Motors Accep- 
tance Corp. (GMAC) — plus Toyota Financial Ser- 
vices Corp. It was formed late in 2001 (Toyota joined 
in 2002) in response to dealer requests for a Web- 
based credit aggregation system. Dealers wanted to 
complete each customer’s credit application once 
and send it simultaneously to their in-house credit 
companies as well as independent lenders for imme- 
diate responses. Previously, each lender had to 
proached separately, and responses took a long time. 
The heads of the four global finance companies re- 


@ Toyota Financial 
Services Corp. 


SOURCE: WWW.ROUTEONE.COM 
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Continued from page 41 

alized that because so many of their processes were 
similar, they could form a joint venture, with each in- 
vesting less and gaining a better system sooner. 
That’s how RouteOne was born. 

Since then, a team of 50 RouteOne employees, half 
in IT, have built a system that’s securely integrated 
with back-end decision engines at more than two- 
dozen lenders. “Web services is really what we’re 
talking about,” says Gruber. “We are a gigantic XML 
messaging conduit with a user interface attached on 
the side.” The system is currently being piloted with 
several dozen dealers, and after adjusting for dealer 
feedback, it will be broadly launched over the next 
several months. 


Joint-Venture Virtues 

RouteOne benefits from the financial power and ex- 
pertise of four top companies, each of which has ma- 
ture, sophisticated technology. Its executives are on 
loan from the automakers’ finance arms; its board of 
directors includes two representatives from each 
company, and Gruber heads the CIO advisory board. 

The board’s expertise came in handy in making 
some early decisions on core tech- 
nologies. For example, in discussions of 
how to handle messaging, GMAC 
weighed in with the details of its standard Neb-base 
technology from SeeBeyond Technology QuickLi 
Corp. “We had instant access to people 
in-the-know as to the pros and cons of this technolo- 
gy,” Gruber recalls. He eventually adopted it. 

When RouteOne needed to negotiate a key service 
contract with Cap Gemini Ernst & Young for systems 
integration services, Linda Taggart, global CIO for 
GMAC at the time, pitched in to help. “She has a very 
tough negotiating style,” Gruber says. “It was eye- 
opening and very beneficial.” 

The parent companies also helped Gruber get his 
evolving IT house in order. When he tapped Ford 
Motor Credit for help in setting up his project man- 
agement office (PMO), key staff members were gen- 
erous with their time and advice. “They really opened 
up their PMO book,” he says. 

But there were difficulties as well. Cultural differ- 
ences among the partners made communication frus- 
trating and put people on edge. “We’d have long con- 
versations,” Gruber recalls, “and at the end, people 
would go back to their offices and close the doors and 
breathe for a while and then come back out.” 

In a joint venture, seemingly simple technical deci- 
sions can have political ramifications. “Decisions can 
create turmoil if one of the owners feels shortchanged 
because the decision made more sense for the oth- 
ers,” says RouteOne CEO Mike Jurecki, who is on 
loan from Ford Motor Credit. 


| 
| 
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For example, there are differences in the way the 
partners identify dealerships. If a dealership has two 
branches in different parts of town, some count it as 
one dealership and some as two. “We needed to build 
a mechanism so that we would not force a uniform 
definition on all to the disadvantage of some,” ex- 
plains T.N. Subramaniam, RouteOne’s chief architect. 

Navigating the political terrain of a joint venture 
is “very difficult” for a CIO, says Jurecki. “My single 
biggest concern was how [Gruber] was going to han- 
dle the three 10,000-pound gorillas he had to deal 
with day in and day out,” he says, referring to the 
three original venture partners. 

Before Gruber was hired, IT decision-making at 
RouteOne had been a jump ball, with various people 
taking the lead. “It was a mishmash,” Jurecki says. 

When Gruber arrived from DaimlerChrysler Ser- 
vices, where he had been responsible for lease and 
loan programs, asserting his authority as IT chief 
wasn’t easy. “We've got four very mature, very capa- 
ble technology organizations, and if you get three 
technologists in a room, you get five opinions,” 
Gruber says. But he learned early to draw the line. 
“They’re an opinionated bunch,” he says of the CIOs, 
“and though I cherish their input, it’s my decision.” 

And Jurecki backs him 100%. “You have to let the 
CIO do his job,” he says. There was some early push- 
back from the CIOs, Gruber recalls, “but I think it 
was just a test to see if I meant it. I think it was actu- 
ally a relief for them that they had someone who was 
going to make a decision and stick by it.” 

Still, the CIO advisory board meetings can be 
“noisy,” Gruber says. For example, developing Web 
services standards was a challenge because several 
possible standards were still in draft form at the time. 
Subramaniam’s recommendation to devel- 
op a “lite” version of the Web Services Re- 
liability standard made some people ner- 
vous, Gruber recalls, but he ran with it. 
“There was some concern that we were 
moving too fast, but T.N. made a convinc- 
ing case, and we thought the benefits outweighed the 
risks,” he says. 

Gruber likes a good debate. “Your best friends are 
those who challenge you on your beliefs and cause 
you to think it through and prove to them why it’s a 
good idea,” he says. “There’s a lot of that going on, 
but almost entirely in civil tones.” 

Gruber has become a “human systems integrator” 
— able to listen to all sides and find common ground 
for making good decisions, says Shaun Coyne, CIO at 
Toyota Financial Services. Along the way, RouteOne 
has developed its own unique culture, which makes 
things go smoother than in the early days, Gruber 
says. But no one claims that it has been easy. “From 
an IT project perspective, it’s every bit as complex as 
it seems,” says R.J. Bussone, IT project delivery man- 
ager at RouteOne. “You can never forget about that.” 

Now that Gruber and the others have hammered 
out a way of working together, he’s looking forward 
to the next phase. “We really want to hear what the 
dealers have to say” after the pilot, he says. “And we 
already have a whole list of enhancements. Release 2 
is where it gets kind of fun.” @ 42042 





Melymuka is a Computerworld contributing writer. 
She can be reached at kmelymuka@yahoo.com. 
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Making a 
Joint Venture 
Work 


ClO Joel Gruber says RouteOne’s 
success depended on getting some 
crucial things right. Among them: 


Communication 


Get agreement on the definition of 
key terms, how to communicate and 
what's off-limits in various forums. 


Decision-making 


Establish who makes the decision. 
Otherwise, every issue is a 
never-ending discussion. 


Executive support 
Get buy-in and support at the board 
level from the joint-venture owners. 


They can line up support in their 
respective organizations. 


Determination 
Establish what you need and fight for 


it right away. Have a lot of small battles 
early rather than major blowouts later. 


Honesty 


Be biunt and honest when discussing 
expectations, particularly with vendors. 


Project management 


ASS ei 


Get the right people in the right jobs 
and trust them. 


Perspective 





. 











There’s a communications network we can all learn from. 


You already have an incredibly efficient communication network - your people. BT can offer.you complete business solutions to 
orchestrate that natural potential:in your business. We work with 5,000 companies and have more than 17 years of global account 
management experience. Which.means that we have the experience but you have an inbuilt infrastructure that is infinitely more 
valuable...people. Because we understand that in business, communication is everything. 


. 
www.bt.com/globalservices BT 
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IKES! Waldemar Ramos had just learned 
that the McDonald’s Corp. marketing de- 
partment needed a complete project plan 
within 30 days for an IT system support- 
ing its new “I’m lovin’ it” campaign. 
“We didn’t even have project require- 
ments at that point,” recalls Ramos, a 
project leader at McDonald’s. Just the 
same, he was able to jump into action — revising de- 
liverables, figuring out the new requirements, calcu- 
lating how the new priorities would affect other on- 
going projects and drafting a revised statement of 
work. “The nice thing about it was we were able to 
meet the deadline, as well as complete the other 
projects,” Ramos says. 

Pretty impressive — especially considering Ramos 
isn’t even a full-fledged project manager and won't 
complete his training program until later this year. 

But this isn’t your average IT training pro- 


: CAREERS gram, either. 
In February, McDonald’s launched an in- 


house apprenticeship program for IT proj- 
ect managers in collaboration with the Computing 
Technology Industry Association (CompTIA), a 
global trade association. Ramos and nine other 
McDonald’s apprentices have been learning to be- 
come project managers via in-house classroom in- 
struction and workshops, as well as meetings with 
peers and mentors. 

Most important, they’re simultaneously heading 
up actual — and sometimes quite crucial — projects, 
with budgets ranging in size from $50,000 to several 
hundred million dollars. One apprentice has led 10 
projects since the program began. In order to com- 


e a plete the program, the apprentices must master 37 
skills to their mentors’ satisfaction. 

“It responds to what employers are asking for — a 
combination of knowledge, certification and experi- 
ence,” says Neill Hopkins, vice president of work- 
force development and training at CompTIA. “This 
is the first system of its kind to directly relate IT 
training and certifications with actual on-the-job 
skill validation.” 

Or, put another way, “We’re taking their day-to- 
day work and using that as a context for learning,” 
says Alice Rowland, manager of information services 
organization development at McDonald’s in Oak 
Brook, Ill. 

McDonald’s apprenticeship program is one of six 
pilots that CompTIA is helping to administer as part 
of the National Information Technology Apprentice- 
ship System. NITAS, which debuts in early Novem- 
ber, is aimed at building skills and credentials in at 
least seven IT tracks, the first two of which are IT 
Generalist and Project Management (next page). All 
of the apprenticeships are designed to accelerate the 
transformation of learning classroom theory to using 
on-the-job IT best practices. 

The idea for NITAS actually dates back to Septem- 

z ber 2001, when the U.S. Department of Labor took an 


interest in a national apprenticeship program for IT. 


A nation al apprenticeship program combines It chose CompTIA to administer the program and so 


far has invested at least $3.8 million, which Oakbrook 


classroom and on-the-job learning to develop ao 
Since that time, the pilot programs have generated 


skilled IT workers faster. By Mary Brandel data to help CompTIA define which skills, education- 


There’s usually no time for clowning around for McDonald’s IT apprentices Waldemar Ramos (left) 
and Dan Wilkinson. (Alice Rowland, manager of information services organization development, is in the background.) 
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al credentials and certifications should make up the 
apprenticeship tracks. CompTIA has also formalized 
the system’s infrastructure and work processes, 
trained consultants on how to help employers create 
their own apprenticeship programs and developed a 
marketing strategy to encourage large-scale adoption. 


Bad Timing? 


An apprenticeship program is obviously a boon for 
people who want to start IT careers and is good for 
filling gaps during an IT skills shortage. But is it a 
good idea to be developing new IT talent at a time 
when the economy is still sluggish and many skilled 
IT professionals are unemployed? 

“If it were a couple of years ago, and you couldn't 
get the IT talent, it would be a much more interest- 
ing program,” says Scott Hicar, CIO at Maxtor Corp. 
in Milpitas, Calif. “It might struggle in today’s market 
because companies can find people with relevant ex- 
perience.” But Hicar has positive thoughts about the 
program, too. “It would help to have a standard ac- 
creditation because it gives you a neutral view of that 
person’s experience,” he says. 

Jeff Markham, an IT recruiter at Robert Half Tech- 
nology in San Francisco, a division of Robert Half In- 
ternational Inc., also questions whether the market is 
right for this sort of program. But Markham says he 
supports the notion that “if I can get training while 
getting work done, that’s definitely cheaper.” 

The biggest benefit of the program in this econom- 
ic climate may be to help retain high-quality workers 
and develop skills that are hard to find in the labor 
market, Markham says. 

The way McDonald’s has structured its project 
management apprenticeship could serve just that 
purpose. Its goal was to improve project manage- 
ment as a core skill area “through on-the-job learn- 
ing,” Rowland says. So far, she says, the program has 
shown “statistically significant improvement in 
meeting our business objectives,” including meeting 
deadline, budget and customer-satisfaction goals. 

All of McDonald’s apprentices were already em- 
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ployees when they enrolled in the program. At 
least one — project leader Dan Wilkinson, who 
has worked for 17 years at McDonald’s in and 
outside of IT — is using the program as a career- 
changing move. 

Wilkinson, Ramos and eight others first completed 
three days of in-house training, followed by periodic 
workshops on areas requiring more depth, such as 
project life cycles and management skills. Mean- 
while, they were assigned a four- to six-month proj- 
ect to complete. 

“The sessions are taught at a level where you can 
pick things up and use them right now,” Wilkinson 
says. A recent class on “slip charts,” for instance, 
helped him figure out where he was falling behind 
on project dates and how to create a status report re- 
flecting that. “There’s no learning curve — once you 
experience it, you own it,” Wilkinson says. “It’s an- 
other tool in your tool bag.” 

The apprentices were also given “qual cards,” 
which list 37 measurable skills and were developed 
with the help of industry standards makers such as 
the Project Management Institute. “In my first meet- 
ing with my mentor, we discussed how the project I 
was working on applied to the qual card items,” 
Wilkinson says. They chose the most applicable 
items to tackle, and before the next meeting, Wilkin- 
son learned all he could about those items and ap- 
plied them to his daily job. 

As he developed competency in these skills, he 
demonstrated his abilities to his mentor, who 
checked these items off the card. When he works 
through the entire list, he’s finished with the pro- 
gram. Wilkinson says he’s halfway through. 

CompTIA calls this contextual learning. “When 
the apprentice and mentor sit down for sign-off, it’s 
always within the context of providing a deliverable 
to the company,” says John Aaron, an independent 
consultant who’s training to become a NITAS con- 
sultant. “It’s very relevant to what they’re accom- 
plishing on the job.” 

Wilkinson meets with his mentor two or three 
times a week. Others, such as Ramos, meet once a 


week. “It’s a great opportunity to ask questions while | 
é Beg eee al 
you're not being judged by a manager on what you're | 


doing,” says Sally Head, senior project manager and 
one of five mentors in the program. One apprentice 
asked her recently why change requests are impor- 
tant. “It’s something he felt he should know but was 
afraid to ask, but he could come to me,” she says. 

Apprentices also meet with their peer groups 
twice a month. “We can let our hair down and talk 
with people who are going through the same experi- 
ences,” Wilkinson says. 


Different Approach 
As successful as McDonald’s has been with its pro- 
gram for current employees, the Keyport, Wash., 
division of the Naval Undersea Warfare Center is 
just as happy with its apprenticeship program that 
targets new hires. Since May 2002, Keyport has 
recruited 10 employees to enter its three-year ap- 
prenticeship program, says Christina Rude, training 
facilitator in the information resources department 
at Keyport. 

It takes three years to complete Keyport’s program 
because apprentices go through an IT generalist pro- 


| ing] through a class.” @ 42203 
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IN THE NATIONAL INFORMATION TECHNOL- 
OGY APPRENTICESHIP SYSTEM, the IT Gener- 
alist and IT Project Management tracks are com- 
plete and ready to implement. Other tracks 
planned for 2004 include the following: 


@ Information assurance/security 
= \T enterprise management 

m Database 

m@ Web e-commerce 

@ Network specialization 


On the just-launched NITAS Web site (www. 
nitas.us), employers can obtain information about 
the apprenticeship tracks, on-the-job learning 
techniques and how mentors can be most effec- 
tive. The site will also offer Web-based tools for 
tracking and assessing apprentice progress and 
generating certificates. 

Employers that want to implement an NITAS 
apprenticeship program can also register at the 
Web site. Registration fees vary depending on the 
number of apprentices participating and compa- 
ny size; the fees will be waived for the remainder 
of 2003. 

- Mary Brandel 


gram first and then into a specialty of either net- 


| working or programming. In that time frame, appren- 
| tices complete 120 credits of education or training, 
| either at the local community college or through in- 


house activities; four certifications; and 4,000 hours 


| of structured on-the-job learning. In 2004, Keyport 


plans to expand its specializations to include securi- 
ty, multimedia and database. 
Like McDonald’s with its qual cards, Keyport has 


| “building blocks” that apprentices must master, rang- 


ing from interpersonal skills and public speaking to 
technical skills such as security and Web design. The 
apprentices start out making $12 per hour, progress- 
ing to $20 per hour. Upon completing the program, 


| they may be eligible for full-time positions. 
| 


Rude says the Keyport organization now believes 


| that on-the-job learning is the fastest way to develop 


fully productive employees and the best way to 
transfer knowledge from more experienced workers 


| to the less experienced. 


CompTIA officials hope that other companies will 


| start to feel the same way. The association predicts 
| that 384,000 IT workers will become registered ap- 


prentices and that 6,700 employers will register as 


| on-the-job learning providers in the next five years. 


But whether the program becomes that wide- 


| spread will depend on the economy. “I think we’re a 


little too early in this slow, gradual pickup in the 
market to know if a lot of companies are going to do 
this,” Markham says. “But it’s a lot more valuable to 
have real-world working training than [to get train- 


Brandel is a Computerworld contributing writer in 
Grand Rapids, Mich. She can be contacted at 
mary.brandel@comcast.net. 
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IELD SALES representatives 
are key to the success of any 
CRM sales suite, but there’s 
another group of users that | 
may be even more impor- | 
tant: their sales managers. | 
The sales manager is not only in 
charge of territory assignments for his | 
sales reps, he’s also the manager and | 
coach who helps ensure his sales reps _| 
meet their objectives. In order to do all | 
of this effectively, the sales 
manager needs constant infor- 
mation from the sales reps 
about their leads, their active 
prospects and the progress of 
their opportunities. A CRM tool is ex- 
tremely well positioned to provide this 
information and can make a sales man- 
ager much more effective. In fact, the 
sales manager probably has the most 
to benefit from the use of a CRM or 
sales force automation tool. He’s your 
best ally in the battle for mind share 
and buy-in for a CRM project. 
The close relationship a sales man- 
ager has with his team of field reps 


GET SALES CHIEFS 
ON YOUR SIDE 


Sales managers can make or break a CRM or 


BOOK 
EXCERPT 


MANAGEMENT 


| also means he’s the best person to sell 


them on the benefits of a CRM system. 
The sales manager has the key advan- 
tage of being able to make usage man- 
datory and to get compliance. If some- 
one has to wield the stick, the sales 
manager has the best chance of doing 
it effectively. 

On the positive side, a sales manager 
can help his sales reps accept the new 
processes and benefits and answer the 
famous question, “What’s in 
it for me?” He can also insist 
that all reporting and activity 
management be done using 
the new system — not e-mail 
attachments. 

In weekly meetings, for example, if 


| asales rep refers to a lead or an ongo- 


ing opportunity that he hasn’t entered 
in the new system, all the sales manag- 
er has to say is that it’s not visible on 
his laptop and he won't talk about it 


| until it is. You can be reasonably sure 
| that within one week of this sort of 


training, everyone on his team will be 
using the system. 


sales force automation project. 


| training session for one real-life sales 


| is about 1 to 8, you can see that you 


| all-important sales managers? The ba- 


| program with full participation of a 





On the negative side, the sales 
manager can do exactly the opposite, 
with devastating results. During the 


force automation system, for example, 
sales managers categorically rejected 
the new system with comments like, 
“Whoever dreamed up these processes 
doesn’t know how we really work.” As 
the ratio of sales managers to sales reps 


don’t need more than a handful of sales 
managers to send an implicit or explicit 
message of noncooperation to their 
teams, effectively stalling the project. 
So how can we get buy-in from these 


sic prerequisite is an operational pilot 


sales manager and his team. After a 
successful pilot (which should, by defi- 
nition, yield at least one enthusiastic 
sales manager), the rollout for the rest 
of the project should include the fol- 
lowing key activities and milestones: 

1. A one-day off-site workshop for all 
sales managers. The goal is to sell the 
system and the benefits of the new or 
changed processes. This workshop is 
run by the CRM project team, with the 
full blessing and participa- 
tion of the sales director. 
This group will demon- 
strate the pilot system, em- 
phasizing the lessons 
learned and quantifying 
(wherever possible) the 
benefits. This should be 
followed by a hands-on session so that 
they can get a feel for the new tool. 
Open debate about the pros and cons 
should be encouraged to get all the is- 
sues on the table for an informed deci- 
sion. At the end of the workshop, there 
should be a vote on how to proceed, 
based on real benefits and concerns. 

2. The feedback from this workshop 
should determine whether there will 
be a full-scale rollout. If the sales man- 








CRM IN-DEPTH 
For news and resources 
about CRM projects, visit 
our Knowledge Center 
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TOP FIVE REASONS 


Project initiated with unclear 
goals, metrics and expectations 


Poorly defined or 
SE ese ently 


Lack of commitment from 
senior executives, sales man- 
agement and channel partners 


Lack of strong buy-in 
from salespeople 


BOOM Eee ML Ube 
agement needs; not enough 
CEC CRs ry) 
PU mera Crue 


agers aren’t sold on the benefits, for 
whatever reason, why turn the project 
into a crapshoot and proceed with a 
rollout to sales reps who'll take their 
cue from their sales managers? 

3. Sales managers must be present at 
the training sessions for their teams of 
sales reps. The fact that they already at- 
tended the workshop must under no 
circumstances be an excuse 
to skip the training session. 
They’re there to anticipate 
objections, placate Luddites 
and ensure buy-in to the 
new processes. They have 
to make it abundantly clear 
that from the very next day, 
the new system will be the only channel 
of communication for sales reporting. 

4. Since sales managers are laying 
their credibility on the line, the result- 
ing system must be reliable, with high- 
quality data and very extensive sup- 
port during the first few weeks. Other- 
wise, even the most well-intentioned 
sales managers might defect and fall 
back to their old ways. You won’t get a 
second chance. 

Major battles are won by choosing 
your allies wisely, and sales managers 
are the best allies for a CRM project. If 
you don’t have this buy-in — not just 
“signed-off” buy-in, but actual enthusi- 
astic and palpable buy-in — you might 
as well put the project on hold. Sales 
managers can stop any CRM initiative 
dead in its tracks simply by saying 
(rightly or wrongly) that it will hurt 
sales. And there won't be much the 
sales director can do about it. @ 41899 





This article was excerpted from The 
CRM Project Management Handbook 
(Kogan Page Ltd., 2002). Gentle is an 
international CRM consultant based 
in Paris. 
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States’ Outsourcing 
To Reach $23B 


Spending on IT outsourcing by 
state and local agencies is ex- 
pected to increase from about 
$10 billion this year to more than 


$23 billion by 2008, according to | 


the “State & Local Outsourcing 
MarketView,” published by Input, 
a Reston, Va.-based consulting 
firm. The report cites anticipated 
shortages in experienced govern- 
ment IT workers and state rev- 
enues as factors driving the out- 
sourcing increase. Repetitive 
processes and transactions, such 
as Medicaid and welfare pay- 
ments, are the types of services 
that will most likely be turned 
over to outside vendors. 


Ensenda Taps IT 


Exec From UPS 


Ensenda Inc., a San Francisco- 
based delivery company, has 
named Gene Wojciechowski as 
vice president of technology. He 


will lead customer and partner in- 


tegration and other technology 
efforts. Wojciechowski has 27 
years of IT experience, specializ- 
ing in the supply chain and logis- 
tics management industries. Be- 
fore joining Ensenda, he was CIO 
at UPS Freight Services, where 
he led a staff of more than 200, 
and was also an information sys- 
tems executive at USL Capital 
Corp. Wojciechowski will report 
to Ensenda CEO Chris Mannella. 


Curative Health 


Appoints New CIO 


Anne Bruce, a former IT leader 
at IBM, Ernst & Young Interna- 
tional and, most recently, eLoyal- 
ty Corp., has joined Curative 
Health Services Inc. as CIO. In 
her new role at the Hauppauge, 
N.Y.-based disease management 
company, she will oversee the 
consolidation of all IT systems to 
one platform and other IT strate- 
gies designed to expand Cura- 
tive’s Specialty Pharmacy and 
Wound Care businesses. Bruce 
will report to Curative CEO 
Joseph Feshbach. 
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Satisfying IT’ Customers 
May Be a Bad Idea 


OST IT DEPARTMENTS I| encounter 
say “customer satisfaction” is among 
their key goals. Unfortunately, this 
idea seems to lead too often to poor 
results. While the sentiments are laud- 
able, the law of unintended consequences seems to in- 
terfere. Goals are tricky things. Well-intentioned yet 
poorly selected goals frequently lead organizations to 


do exactly the wrong 
things. 
For example, think about 
the Avis car rental people. 
Their slogan is “We Try 
Harder.” I imagine them 
emphasizing the impor- 
tance of trying harder 
every day. And being a 
good company, the staff re- 
sponds by trying harder all 
the time. That’s nice in a 
motherhood-and-apple-pie 
kind of way, but as a cus- 
tomer, I don’t really care 
how hard they try. I’m con- 
cerned with how well they 
succeed. If they offer me 
flawless service and great prices with- 
out breaking a sweat, I’m thrilled. If 
I’m treated to long lines and high 
prices from earnest and overworked 
staffers, I’m not a happy customer. 
There are no good grades for effort. 
My observation is that customer 
satisfaction is generally one of those 
goals that misleads people on both 
words: customer and satisfaction. And 
what may seem like a petty case of 
semantics leads well-intentioned 
professionals astray. Inappropriate 
metaphors make poor foundations for 
reasoning about day-to-day decisions. 
IT departments don’t really have cus- 
tomers; they have clients. The dictionary 
definition of customer is “one who 
purchases a commodity or service.” 
People striving for customer satisfac- 





tion tend to think of a 
customer as someone 
who’s involved in a trans- 
action, someone standing 
in a checkout line making a 
discrete purchase. 

But IT customers, even 
if they are paying ones, 
aren’t involved in a short- 
term deal. They’re in- 
volved in a long-term rela- 
tionship with a group of 
highly skilled profession- 
als. They’re really clients, 
which the dictionary de- 
fines as “people who en- 
gage the professional ad- 
vice or services of others.” 

And the dynamics of a professional 
partnership are quite different from 


| those of acommodity transaction. 


Using the image of a customer often 
leads to the “customer is always right” 
mentality that’s so necessary when 
every transaction is a new deal. But in 
this case, the customer isn’t always 


| right. Clients come for expert counsel, 


not sycophantic submission. 
Satisfaction comes from experience, not 


| technology. Most people in technical de- 


partments assume that their clients 
judge them by the quality of their 
technology. Of course, this seems like 
a natural assumption. Technology is 
what they’re buying — isn’t it? 
Customers may judge their satisfac- 
tion in large part by the quality of the 
products they purchase, but clients 





don't. Since clients look to you for ex- 
pertise, they’re rarely in a position to 
judge the quality of your work. 

While clients can usually distin- 
guish between adequate and inade- 
quate work, they may not be able to 
distinguish between good and brilliant 
work. If they knew enough to differen- 
tiate, they probably wouldn’t need 
your help. 

So instead, they judge the quality of 
your work based on proxies. They 


| judge based on the experience of be- 
| ing a client rather than the beauty of 


your code. 
Imagine that you hired a lawyer to 
write your will. How would you de- 


| cide if you were satisfied? Your deci- 

| sion probably wouldn't be based on 

| whether the will was written in per- 

| fect iambic pentameter. Assuming the 
| legal document contained the key 

| things that you requested, you would 


judge based on the experience of 
working with the lawyer. 
Did you receive the deliverables on 


| time? Did you get explanations in lan- 
| guage that you understood? Were you 


condescended to? Was the price as 


: ; 
| promised? Was the lawyer available 


when you wanted to talk? 
Satisfaction in professional relation- 


| ships is based more on the experience 
| of the relationship than on the quality 


of the product. Using customer satis- 
faction as a goal too often leads to ef- 
forts to improve satisfaction by im- 
proving the product, emphasizing the 
one thing that your clients probably 
won't notice. 

So instead of focusing on customer 
satisfaction, a better goal is to create a 
quality “client experience.” When you 
do that, both you and your clients can 
share in a more satisfying relationship. 
@ 42156 
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The right management can put you in control of your infrastructure, 
not the other way around. 
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Earn Your Master’s Degree Online! 


M.S. Degrees Real time evening courses 
Available in: 


* Network Security 
- Computer Science Live Audio Lectures 


* Electrical Engineering : 
* Information Architecture and Sela Interface 


* Information & Telecommunications 
Systems Management 
* Business Administration (MBA) . Fully Accredited 
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for their IT needs. 
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With Spector CNE on your network, you 
will easily prevent or eliminate problems 
associated with Internet and PC abuse. 


Spector CNE provides an immediate and 
accurate record of every employee's: 


Emails Sent & Received 


Chat/Instant Messages 


seed’ Keystrokes Typed 


Web Sites Visited 


lem Programs Launched 


VCR-like Snapshot Recording 


To learn more about Spector CNE and 
Rea eek CRE Aes 
your business call 1-888-598-2788 
or visit www.SpectorCNE.com 


company secrets 
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Record Everything Your 
Employees Do On The Internet. 


A few minutes a day of personal surfing, online shopping and chatting may seem harmless, 
but consider this... 


A recent study concluded that employees spend an average of 75 minutes per day using 
office computers for non-business related activity (surfing porn, gambling, shopping or even 
searching for sex online). That translates into an annual loss of $6250 per employee or more 
than $300,000 per year down the drain for a company of just 50 employees 


So how do you catch guilty employees who won't admit they are stealing company time? 
Introducing Spector CNE — Corporate Network Edition 


At the touch of a button, you can monitor any employee, any time, anywhere on the 
network. Spector CNE secretly records and archives chat conversations, instant messages 
(AOL, MSN and Yahoo), emails (including Outlook, Exchange, AOL and web-based mail like 
Hotmail), web sites visited, keystrokes typed, files downloaded, programs run and more 


And unlike many filtering and blocking tools, Spector CNE records everything they do in 
exact visual detail. So, you have absolute proof that goes way beyond just knowing they 
visited porn.com. 


Take control of employee PC and Internet abuse with Spector CNE. It'll be the best 
software investment you make this year. 
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SOFTWARE CONSULTANT - 
HR/PAYROLL SPECIALIST 


Resp. for analyzing, dsgng 
dvipng & impimntng computer & 
business appins for existing or 
proposed HR Info. Sys. & payroll 
sys. such as retirement savings 
health/benefit, flexible spending 
allowance and/or direct deposit 
sys. Specific duties will include: 
) dvip, impimnt & improve HRIS 
& payroll programs, sys., appins 
& related procedures; (ii) encod- 
ing, testing, debugging & 
installing programs & other sys. 
stilizing indepth knowledge of 
PowerBuilder, SQL, PL/SQL & 
Oracie w/in Sun Solaris, HP 
UNIX & vdows 2000 environ 
ments; (iii) dvipng & maintaining 
Jocumentation related to 
HRIS/payroll sys. dvipmnt/main- 
tenance; & (iv) keeping abreast 
of technological advances to 
HRIS & payroll sys. through 
monitoring professional journals 
attending trade 
shows/seminars. Bach. degree 
in Come ci., Comp. Info. Sys. 
Math or Engnrg + 2 yrs exp. in 
position offered or as a Software 
Engnr, Sys. Analyst, Prog 
Analyst or Appin Dvipr reqd 
Exp must include (1) 
HRIS/Payroll sys including 
401(k) GUST & PayGO; (2) 
PowerBuilder 8.0 & 6.5 & SQL & 
PL/SQL; (3) Oracle 8.i; & (4) 
Sun Solaris & HP UNIX 11 & 
Windows 2000. High mobility 
preferred. 40 hrs/wk, 8am 
5pm, $64,240/yr Qualified 
applicants submit resume to Site 
Manager, Armstrong County 
CareerLink, 1270 North Water 
Street, PO Box 759, Kittanning, 
PA 16201-0759. Refer to Job 
Order No. WEB 367232 


tware Development Eng- 

2er; Complete translation of 
company software products and 
options into Japanese 
Implement localization and 
translation, and formulate a 
technical plan for the company's 
products to be fully enabled for 
globalization Use Microsoft 
Visual C++ and Visual! Basic 
HTML, Java Script and XML 
Utilize change tracking software 
tools and perform 
development in 
Windows 98 and 
Participate in client server and 
web based applications and 
architectures Requirements 
include a Bachelor's degree or 
equivalent in Computer Science. 
Physics, an Engineering disci- 
pline or closely related field and 
at least five years of work expe- 
rience in the job offered or relat- 
ed field of software engineering 
with a specialization in localiza- 
tior Requires proficiency in 
Japanese language for transla- 
tion and localization purposes 
Appi 's must have unrestrict- 

thorization to work in the 

United States. Salary $74,290. 
year. 40 hours/wk. Respond 
with two copies of resume to 
Case #200202798 Labor 
Exchange Office, 19 Staniford 
St., 1st Fl., Boston, MA 02114 


Seeking qualified applicants for 
the following positions in 
Memphis/Collierville TN 
ior Programmer Analyst. 
rmulate/define functional 
ements and documenta- 
ased on accepted user cri- 
teria. Requirements: Bachelor's 
degree or equivalent in comput- 
er science, MIS, engineering or 
related field plus 5 years of 
experience in systems/applica- 
tions development. Experience 
with object-oriented program- 
ming languages, application 
server technologies and a Java 
Messaging System also 
required. “Master's degree in 
appropriate field will offset 2 
years of general experience 
Submit resumes to Sibi George. 
FedEx Corporate Services 
1900 Summit Tower Bivd., Suite 
1400, Orlando, FL 32810. EOE 
M/F/D/V. 


IT|Careers 


Senior Systems Analyst 
Perform technical/analytical 
work on new/existing computer 
software components/programs 
May involve work on problem 
domain definition/analysis and 
program code design/develop- 
ment. Design/implement soft- 
ware objects/structures, efficient 
task-focused GUI components 
and design. Design/implement 
software domain models/other 
components and assist with 
incorporation. Produce easy to 
use interface designs using 
internal design standards. 
Provide documentation/descrip 
tions fo: design/projects 
Mentor/train members of the 
Development Group. Must have 
Bachelor's/foreign equivalent in 
Computer Science, Engineering 
or related. 4 years experience in 
position or as Programmer 
Analyst Systems Analyst 
Software Systems Engineer, or 
related. Applicable 4 years 
experience must include 4 years 
experience with a Windows or 
NET based programming lan- 
guage (Delphi preferred; C+ 
Eiffel, C++, or other object-ori- 
ented such as Java acceptable) 
3 years original problem domain 
analysis, design, and implemen- 
tation in accordance with object- 
oriented principals/methods; 4 
years experience with current 
relational database products 
(MS-SQL Server preferred 
Oracle, DB2, or Sybase accept- 
able) including database 
schema/SQL statement design 
40 hrs/wk, 9-5. $78400/year. 
Must have proof of legal author- 
ity to work in the US. Send 
resume to lowa Workforce 
Center, 1700 S. 1st Ave. lowa 
City, IA 52244-2390. Please 
refer to Job Order 1A1101781 
Employer paid advertisement 


sultant. Multiple Positions 
Perform data analysis, design 
architect & modeling tasks for 
OLTP & DW databases in an 
environment incl. IBM RS/6000 
Servers, AlX4.3, IBM UDB 7.1 
Autoloader, Data Junction 7.5.1 
Informatica 5.0, Microstrategy 
7.2.2, Microstrategy Desktop 
7.2.2, Narrowcast Server, MDX 
Adapter, Windows 98/NT PC 
Anywhere 9.2.1, Citrix 4.2 & All 
Fusion Erwin 4.1. Develop 
Logical/Physical Data Models 
using S$ Snowflake schema 
jesign & Data Marts as an 
Architect using ALL Fusion 
Erwin 4.1, with sizing estima- 
tions. Perform analysis tuning 

g Visual Explain, Event 
Monitor, Snapshot monitor and 
DB2 trace in OLAP 
Environment. implement Extrac- 
tion, Transformation & Load 
mapping & sessions using 
informatica 5.0 ETL Tool. Design 
& modify Unix Scripts. Req 
Masters in Computer Sci. or 
Computer Eng. 40-hr wk 
Job/Interview Site: Glendale. 
CA. Send resume to Systech 
Solutions, Inc., 550 N. Brand 
Bivd., #1200, Glendale, CA 
91203 


MET2s 


NET2S is a leading International e- 
business, information technology 
and communication infrastructure 
consulting firm. We are currently 
seeking for the following positions 


* Sr. Tibco (RV, Hawk, Ingetration 
Manager) Developer 

+ IT Risk Mgmt Security Architect 

* Sun One / Siteminder Architect 

* Business Objects / Cognos 
Developers 

+ NET Architect 


All positions require BS/MS degree 
with a minimum of 2 to 3 years of 
experience in the field. Must pos- 
sess excellent communication 
skills as well 


NET2S, 82 Wail Street, Suite 400 
New York, NY 10005; Fax: (212) 
279-1960; Phone (212) 279-6565; or 
Email: jobus-ny@net2s.com 


Advanced Programmer Analyst 
Design, develop & implement 
business application systems in 
client server & web based envi- 
ronments; administer middle tier 
environment using MTS/COM+ 
design & develop COM compo- 
nents using Visual Basic, SQL 
Server, and C/C++ on Windows 
NT and UNIX platforms 
Requirements: Bach. degree in 
Comp. Sci., Math, or related 
field PLUS 4 yrs. in job or 4 yrs. 
as Systems Analyst/Prog- 
rammer performing software 
design & developing & imple. 
menting business application 
systems in client server environ: 
ment incl. 2 yrs. experience in 
the client server/web based 
environments using MTS. 
COM+, Visual Basic, SQL 
Server, and C/C++ on Windows 
NT and UNIX platforms. Send 
resume to Speedway 
SuperAmerica LLC clo 
Corporate Recruiting 500 
Speedway Drive, Enon, Ohio 
45323. Fax: (937) 863-6722 


SW DESGN ENGR. Desgn & 
devip SW/firmware for new 
prducts includng desgn 
implemntn & verificatn of SW 
progrms &/or firmware/HW sys 
& the documentatn to produce it 
in quantity & supprt it; or startng 
w/ such documentatn, responsi 
ble for maintng existng prducts. 
Implemnt SW featrs to increase 
performnc & reliability. Desgn 
devip, test & supprt SW while 
investigatng & understandng 
end-user reqs. Monitor projct 
budget & schedule to ensure 
implemntn is in-line w/ projct 
parametrs Resolve reprted 
defects from implemnted SW. 
Req: Bach degr or foreign degr 
equiv in CS, CE, EE or related 
engrg field + 2 yrs exp in job 
offered or 2 yrs as Sys or SW 
Engr. Sal: $71,520/yr. Loc: Ft 
Collins co 8am-5pm 
40hrs/wk. Application is by 
resume only. Send resume to: 
WORKFORCE DEVELOP: 
MENT PROGRAMS, P.O. BOX 
46547, DENVER, CO 80202 
Ref: JO#C05059276. Must have 
proof of legal authority to work in 


U.S 


Sr. Consultant. Consult w 
clients on implementation of 
Co.'s trading & risk management 
system w/ respect to energy 
trading & risk mgt. business 
processes & technical aspects 
assist clients in analyzing & 
modeling valuation & risk of 
energy assets & trades through 
financial analytical techniques 
support Co.'s clients by gather- 
ing business reqs, developing 
customized & new product func- 
tionalities, & solving system 
issues & participating in stages 
of full lifecycle development 
methodologies using VB, Oracle 
& MSSQL. Reqs: Masters in 
Math, Finance, or Bus. Admin 
PLUS 5 yrs. in job or 5 yrs. as 
Consultant/Research Analyst 
incl. 3 yrs. in energy industry 
performing financial modeling & 
valuations & programming using 
VB, Oracle, & MSSQL. Send 
resume to KW North America 
LLC c/o Human Resources, 601 
Jefferson, Suite 3750, Houston 
TX 77002 Fax: 832-366-1958 


Software Application Engineer to 
program, install, configure, and 
develop web based Human 
Resource/workflow applications. 
Interface with customers. Duties 
performed utilizing Outlook, SQL 
Server, Visual Interdev, Java 
Script, ASP platform. Knowledge 
of Ceridian products and 
Outlook required. Bachelors 
Degree in Computer Engin- 
eering and one year experience 
or equivalent. Send resume to 
Isarla Inc. 699 Fall River Ave. 
Seekonk, MA 02747 Fax: 508- 
302-0506 
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SW DESGN ENGR. Desgn 
devip, implemnt, supprt & verify 
SW/firmware for new prducts 
Test, desgn & implemnt Java 
code module, port srvc & 
enhance cntrol mngr directory 
based repository. Investigate 
re-factor, devip, test & maintn 
Srvc Cntrol Mngr Repository. 
Implemnt Srvc Cntrol Mngr 
Repository on Linux. Work w. 
custmrs team membrs & 
SCMgr Core Agents & Mngr 
teams in devipng follow-up 
releases. Work w/ Common 
Srves team to align both SCMgr 
& Sys Configuratn Repositories 
along industry standard directo- 
ry based infrastructure. Req 
Master degr in CS, CE, EE or 
ritd field. Sal: $64,800/yr. Loc 
Ft. Collins, CO. 8am-5pm 
40hrs/wk. Application is by 
resume only. Send resume to 
WORKFORC DEVELOP- 
MENT PROGRAMS, P.O. BOX 
46547, DENVER, CO 80202 
Ref: JO#C05059986. Must have 
proof of legal authority to work in 
US 


CCIE Technical Support 
Manger-Post Sales - Manage 
post-sales technical support 
activities of technical support 
staff engaged in the analysis 
design and implementation of 
solutions to engineering and 
integration problems of complex 
internetworked systems based 
in Cisco Systems technologies 
Bachelor's degree or foreign 
degree equivalent in Computer 
Engineering or related field 
required and five years of expe- 
rience in network design engi- 
neering and/or network support 
engineering. Please forward 
resume to Attn: Mike Gallimore 
BellSouth Communication 
Systems, 2359 Perimeter Point 
Parkway, Charlotte North 
Carolina 28208. Please do not 
email or fax resumes. EOE 


SW DESGN ENGR. Provide 
current prod engrg supprt for 
new HP Prducts. Create code 
fixes & customr enhancemnts to 
provide quality supprt for HP 
customr. Function as an integral 
part of Current Prduct Engrg 
Team for HP prducts & fix 
defects in various subsys of this 
prduct. Responsible for demon- 
stratng specific processes 
knowldg in area of internal 
implementatn of HP techniques 
Req: Bach degr or foreign degr 
equiv in CS, CE, EE or related 
engrg field + 2 yrs exp in job 
offered or 2 yrs in Software 
Engineering capacity. Sal 
$71,280/yr. Loc: Ft. Collins, CO 
8am-4pm, 40hrs/wk. Application 
is by resume only. Send resume 
to: WORKFORCE DEVELOP- 
MENT PROGRAMS, P.O. BOX 
46547, DENVER, CO 80202 
Ref: JO#c05060015. Must have 
proof of legal authority to work in 
US 


Software Engineer sought by 
s/ware dvipmt co. specializing in 
airport computer systems dsgn 
for immediate opening at its 
Englewood, CO office. BS in 
Comp Sci + 5 yrs exp in dsgn & 
dvipmt of s/ware systems for 
secure, multi-user large scale 
applics. Exp w/using Sun Solaris 
& h/ware, SCO OpenServer. 
Linux, Oracle 7/9i, Apache 
Samba, Sendmail, C/C++ 
VC++, Embedded VC++, VJ++ 
PERL, SQL, Korn/te Shell 
PVCS & configuring routers/ 
switches/terminal servers & 
printers highly desirable 
Forward resume to HR, Attn RM, 
InterSystems USA, Inc, 6675 S 
Kenton St, #116, Englewood, 
CO 80111 or email to 
HR@itsden.com 


Konnech, a smali telecomm 
firm, is looking for IT profession- 
al. Applicants must have CS/EE 
degree, MCSE for Network and 
MCDBA for Database. Exp. in 
telecomm, VoIP, & multi-sensor 
integration preferred. Please 
send cover letter and resume by 
email to eyu@konnech.com 
EOE 


Internet Operation Center (IOC) 
is looking for software/project 
engineers, system/programmer 
analysts. Duties include quality 
assurance, use Oracle, SQL 
web tech, VB, DB2, ASP, C/C++ 
XML, Java/Script. Must have 
BS/MS plus experience. Please 

at resume@iocenter.net 


Prog/Analysts to 
design business/scientific appls 
using SAP R/3, ABAP, VB 
Oracle, SQL Server on UNIX 
Windows envir; develop tech 
design docs; determine reqs 
perform monitoring, quality con- 
trol; test/troubleshoot project 
app! code according to system 
objectives. Require: BS or for- 
eign equiv. in CS/Sci./Engg 
(any branch) & 2 yrs of exp. in 
IT. Travel involved High 
salaries. Respond to: HR 
Smartsoft International, !nc 
7900 Steubenville Pike Suite 21 
Imperial, PA 15126 


analyze 


NE OH Medical Devices seeks 
Senior Software Engineer to 
research, design and develop 
software algorithms for Image- 
Guided Surgery system, manag- 
ing project for Image-Guided 
Surgery system, applying princi- 
ples and techniques of computer 
science, engineering and math- 
ematical analysis. Ph D. in 
Computer Engineering req. Must 
have strong mathematical back- 
ground/w quality and regulatory 
requirements for medical prod- 
ucts (FDA, CE, ISO), medical 
imaging/scientific visualization 
image registration, image pro- 
cessing, C/C++, Unix or Linux 
Tcl/Tk. Resumes send to: 3740 
Euclid Ave. Cleveland, OH 
44115. No calls. EOE 


System Admins to install, main 
tain, administer Windows NT, 
Linux HP-UX,SCO/Solaris 
plan, maintain, troubleshoot 
LAN/WAN; manage networking 
protocols TCP/IP, IPX/SPX, etc 
install, upgrade network hard- 
ware/software. Require: B.S. or 
foreign equiv with conc in 
CS/Science/Engg.(Any branch) 
and 2 yrs exp in IT. Travel 
involved. High salary. Respond 
to: HR, Radiant Technologies 
Inc 335 Majestic Cove 
Alpharetta, GA 30004 


SYSTEMS ADMINISTRATOR- 
Miami, FL; sought by Global 
Logistics/ Freight Fwdg Co 
Req'd to dsgn, admin & maintain 
{IT & HW infrastructure for 
LATAM region. Dvip IT sys & 
d/base accounting progs. Must 
have 4 yrs exp in job offd or 4 
yrs exp as Sys Mgr or Sys 
Specist. Sys:-S-36; RS6000 
Clipper. Must have ability to 
work on a global scale to con- 
duct installations in mainframe & 
NT environ. Send resume to: IT 
Mgr, Latam, Panalpina, Inc., 
3505 NW 107th Avenue, Miami 
FL 33178 
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Software Engineers: Software 
life cycle development in 
Microsoft Development tools 
suite including C#.Net, Oracle 
RDBMS tools suite, SQL 
Server, DB2, COBOL and 
related tech. to develop array 
of apps. including secure 
Client Server/Web based HR, 
Communication and Govern- 
ment apps. Complete job 
description or to apply contact 
HR, 3761 Venture Dr., Bidg 
100, Suite 240, Duluth, GA 
30096. 


Jr.programmer/Ass.pro- 
grammer Analyst to write & 
maintain application prog. & 
collect data to help 
dev/modify complex data 
processing systems, pre- 
pare specifications. Req'd 
B.S in comp sci, comp Eng 
or Elect.Eng. 40hr/wk 
Job/Interview site: Milpitas, 
CA. Send resume to Global 
Finance, 1323 Jacklin Rd 
Milpitas, CA 95035 


Software Engineer Web/ 
Database Dvipr: work w/mktg to 
author all aspects of complex 
Web Pages, incl scripting 
graphic tools, database, inter- 
face, storage, security & client 
training Guide architectural 
deployment of hiware, s/ware 
3rd party components, & proto- 
cols using optimal comp lan- 
guages for client projects 
Communicate w/clients, incl pri- 
mary Chinese mkt. FT. MS 
Comp Sci req'd. Send resume 
only (no calls, faxes or e-mails 
please) to: # YYY, TOTO 
GROUP, 1001 Avenue of the 
Americas, 15th fir, NY, NY 
10018 


Programmer-Analyst 
needed to plan, devel- 
op, test and document 


computer programs. 


B.Sc. computer science 
reqd. Fax resume to 


Fauzan Ahmed @ 


Quantum Software. 


281-895-6623. 


Computer Systems Admin- 
istrator. Analyze/maintain/ 
modify applications on IBM 
mainframe. Req. BS Math/ 
Comp. Science/Rel. Field & 
2 yrs exp in job/2 yrs exp as 
Sr. Analyst/Programmer. 
Spec. Req. Expertise in 
COBOL, DB2, CICS, CSF, 
Cordaptix & Utility Billing 
Systems. Send Resume: 
Louie G. Abad, EV3A, Inc., 
104 Pierpoint Cir., Folsom, 
CA 95630(Jobsite). 
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Software Engineer will be pri- 
marily responsible for the design 
and programming of health care 
application components in Java 
Will participate in team level 
design and review sessions 
Will translate analysis level 
specifications into implementa- 
tion design and working Java 
code. Will document designs 
using standard and proprietary 
modeling methodoiogies, includ- 
ing UML and Entity-Relationship 
modeling. Will also conduct 
and participate in peer design 
reviews for Java, JSP, and EJB 
code and algorithms as well as 
use project standard tools and 
infrastructure such as source 
code control system, bug track 
ing software, and newsgroups. 
Will write infrastructure layer 
modules for application server 
side debugging, testing and 
application resources manage- 
ment. Will design elements of 
system web presentation layer 
model. Will write unit and inte- 
gration test code for all assigned 
components where appropriate 
Will maintain code and imple- 
ment bug fixes for all assigned 
areas of responsibility. Req- 
uires Bachelor of Science or 
equivalent in Computer Science 
Engineering, Electronics, Math- 
ematics, or Physics and five (5) 
years in job offered OR five (5) 
years experience developing 
enterprise-scale distributed 
applications. Candidate must 
also possess demonstrated 
expertise developing enterprise 
scale applications in Java and 
C/C++ for Unix and Windows 
operating systems; demonstrat- 
ed expertise developing J2EE 
applications for WebLogic appli- 
cation server; and demonstrated 
expertise developing JSP and 
Swing presentation layer appli- 
cations. Salary: $90,500/yr. 
M-F, 9AM-5PM Send 2 
resumes to Case #200202827 
Labor Exchange Office, 19 
Staniford St. 1st  fl., Boston 
MA 02114. EOE. Applicants 
must be workers eligible to 
accept full-time employment in 
U.S 


Software Eng. to design, code 
implement client/server, distrib- 
uted middleware applications 
using distributed technology 
object oriented program. Tech 
Java, Java File I/O, Servlets. 
JSP, EJB, JDBC, CORBA, SQL 
PL/SQL, HTML, XML, Shell 
prog., Oracle 9i (RDBMS) 
Weblogic Server (WLS) 6.1, 7 
JBuilder IDE 7.0, Orbix 2000. 
Visio, Harvest CCC, TOAD 
Syncsort Connect Direct 
JProbe 5.0 on Windows NT and 
UNIX (Sun Solaris) OS. Comp 
salary in Compliance with 
Prevailing Wages. MS in Comp 
Appins. or CS or equivalent + 2 
yrs. exp. In duties Comp 
salary. Apply: Netserv 6580 
Jimmy Carter Bivd, Norcross 
GA 30071 with proof of perm 
work auth 


Computers-Software 
Engineers needed. Break- 
through Management Group, 
Inc., based in Longmont, CO 
is seeking qual. candidates 
possessing BS or equiv 
and/or rel. work exp. Part of 
the req. rel. exp. must include 
3 yrs. working with Java 
serviets & JSP. Duties 
include: Work with 3 of the fol- 
lowing: Java, serviets, JSP, 
XML/XSL Oracle, SQL 
Server. Fwd. resume & ref 
via email to: 
lTemployment@BMGi.com 
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ONE Network Enterprise (ONE) 
Inc., a leader in transportation 
logistics software solutions, is 
looking for IT professionals with 
BS comp sci or related & 2-3 yr 
exp in integration & application 
development to join our 
Charlotte, NC _ location to 
enhance our hosted transporta- 
tion application running in web- 
based J2EE environ. Resumes 
to: G Jones, 8500 Freeport 
Pkwy, South Suite 110 Irving TX 
75063 

Software Engineers. Exp 
w/J2EE solution develop using 
OOAD techniques. Translate 
transpo execution bus req. to 
low level software programs 
using Java/J2EE/JSP/EJBs. Sr 
Engineers. Design, develop, & 
debug features to support ONE 
net-native internet business ser- 
vices for multi-enterprise 
processes using JBoss-Torncat 
app server, Ant, Perforce, PVCS 
Tracker, PLSQL. Exp with 
Java/J2EE arch/EJB/JDOBC 
Oracle, JNDI, RMI, Beans & 
Web Tech including JSPs 
Struts, Framework, Velocity 
Tiles, XML. Sr Integration 
Developers. Design, develop, & 
debug integrations between cus- 
tomer systems & ONE hosted 
transpo apps. Exp analyzing bus 
requirements, developing specs 
for data integration solutions, & 
designing & implementing bi- 
directional integrations between 
EDI & Propriety data format & 
XML formats using Java/XML 
XSL on Sun Solaris platform 


PLM Consultant 


Dassault Systemes Services, LLC 
is dedicated to helping its cus- 
tomers realize the benefits of 3D 
product lifecycle management 
(PLM) solutions 


We are looking for consuitants to 
analyze our manufacturing clients 
needs and configure solutions 
using the Dassault Systemes fam- 
ily of PLM software. Consultants 
will work on site ai customer's 
locations and will be required to 
travel throughout the United 
States 60% of the time.; imple- 
ment PLM software; and provide 
technical support. These posi- 
tions require a Bachelor's degree 
in Mechanical Engineering or a 
closely related field and experi- 
ence with PLM software 


Dassault Systemes Services, LLC 
prornotes a work environment that 
focuses on integrity, teamwork 
and fun. if you qualify, please 
send your resume indicating the 
position of interest to: Dassault 
Systemes Services, LLC, 10926 
David Taylor Drive, Suite 300 
Charlotte, NC 28262 or cv@ds- 
ca.com. Reference #: 2151 
Please indicate the reference 
number on your resume. 


We are an equal opportunity 
employer. 


Softcon USA inc a fast Growing 
software firm is looking for 
the following with bachelor’s 
degree in computer science/ 
related field. 


Computer consultants: 3 plus 
years experience in Design 
development and Test in 
UNIX Linux Windows 
NT/2000/, Java Technologies 
PeopleSoft, Oracle/Applications. 
Data Warehouse, Siebel, SAP, 
Net EA! SQL Server. 
Webmethods WinRunner 
LoadRunner, TestDirector, SQA 
and Rational Rose 


We accept foreign education 
equivalent of the degree, or 
the degree equivalent in edu- 
cation and experience. 


Send resume and covering letter 
to: 2604 E. Dempster St, suite 
209, Park Ridge, IL 60068 
e-mail jods@softcon-us.com 


Business Systems Development 
Manager. Will be responsible for 
development, deployment and 
support of core business sys- 
tems, witn particular emphasis 
on Glovia. Will participate in 
departmental management and 
organizational development. Will 
plan IT t 9 strategy 
developm 
tion. Will wo: 

ness managers understand 
business strategy and business 
drivers. W 
systems projects, including ven- 


age information 


dor and user relationships. Will 
and maintain defined 
work processes and procedures 
Will maintain delivery focus and 
be attentive to development 
schedules. Requirements: B.S 
in CS, IT, MIS, or related field 
and two (2) years of ex 
in the job offered or two (2) 
years experience in the related 
occupation of IT or Systems 
Project Management OR in the 
alternative will accept four (4) 
years of work experience in 
Information Technology two of 
which must be in the role as an 
IT or Systems Project Manager. 
Also, demonstrated experience 
in the following: (1) Managing 
business development projects 
(2) Working on systems archi- 
tecture and software process 
development as well as pack 
system deployment pro- 
(3) Working with supply 
chain management systems 
such as MRP, engineering sys- 
tems, sourcing & procurement 
systems; and (4) Glovia ERP. 
Offered salary is $80,000/year 
for full-time employment (min 
40 hours per week) and stan- 
dard company benefits. EEO 
Submit 2 resumes and respond 
to Case No. 2002-03222, Labor 
Exchange Office, 19 Staniford 
Street, 1st Floor, Boston, MA 
02114 


Software Engineer: For co. spe- 
cializing in mktg & manufactur- 
ing of computer software 
design, code, implement & test 
complex enhance- 
ments. Research new 
concepts & establish plans & 
coordinate them; analyze prob- 
lems & suggest innovative solu- 
tions; design & test plans; train & 
review design work of program- 
mers. Req's: B.S. Degree, or 
equivalent in Computer 
Science, Electronics Engin- 
eering or a related fieid. 4 yrs 
exp in job offered or 4 yrs of pro- 
gramming exp. Exp must 
include design, analysis, trou- 
bleshooting, testing & support 
Prof. in Visual Basic, SQL 
Server, Object-oriented, Oracle 
Java IBM main frame 
Medicare/Medicaid, EDI X12 
(HIPAA Transactions - 270, 271 
276, 277, 834, 835 & 837) 
COBOL II, OS/390, DB2, MS 
JCL, VSAM, SPUFI, QMF, FIL 
AID, MQSeries, CICS, E 
GENTRAN CA-7 CA-11 
ENDEAVOR, IBM utilities & 
PLATINUM (CA) tools for DB2 
40hrs/wk.. Send res. to S-1, P.O. 
Box 17182, Phila., PA 19105 


Computer Programmer sought 
by dental care organization in 
Philadelphia, PA to design 
develop and implement intranet/ 
internet applications and system 
software for claim submission 
and management. Must have 
Bach in Comp Sci., Engg or 
equiv and one yr exp using 
Visual basic, Oracle, SQL 
Server, COM, ASP, VSS, Java 
Javascript, VBScript, HTML 
Adobe Photoshop, Macromedia 
Dreamweaver, Flash, Astra 
Load Runner and Winrunner. 
Respond to: HR dept., A-1 
Family Dental Care, P.C., 8539 
Bustleton Avenue, Philadelphia 
PA 19152 
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IT PROFESSIONALS 


POSITION: Network Product 
Engineer (Glen Mills, PA and 
other locations throughout the 
United States) 

Responsible for assessing exist- 
ing data networking and 
telecommunication infrastruc- 
ture, utilizing extensive experi- 
ence in Voice and Data 
Communication architectures 
utilizing Cisco and other net- 
working equipment vendors 
Responsible for defining a for- 
ward-looking data networking 
and telecommunication strategy 
to encompass voice and data 
communications, utilizing expe- 
rience with WAN (Wide Area 
Network) strategy development 
Apply CCNA (Cisco Certified 
Network Associate) certification 
to install, configure, develop and 
operate Voice and Data net- 
working technologies such as 
LAN (Local Area Network) 
Switching, WAN Routing, Circuit 
Provisioning, QOS, IP Soft- 
Switches, Security, Wireless 
ATM Frame Relay and MPLS 
(Multi Protocol Label Switching) 
Voice Over IP. and IP-VPN 
(Virtual Private Network). Assist 
with procurement and sourcing 
of data networking and telecom- 
munication services by interfac- 
ing with equipment vendors and 
carriers utilizing experience in 
network procurement and deal- 
ing with both equipment 
providers as well as network 
service providers from a sourc- 
ing perspective. Develop train 
ing materials and detailed docu- 
mentation for knowledge trans- 
fer to appropriate operations 
personnel. The wage offered is 
$84,660/year. The work sched- 
le is Monday-Friday 9:00am- 
5:00pm. The minimum require- 
ments are as follows: Bachelor's 
degree in Comp Science 
Electrical Engineering, Tele- 
communications, Mathematics 
Information Technology, Bus- 
iness Administration + 3 years 
experience in the job offered or 
3 years experience as a 
Network Product Engineer. 
Related experience must also 
include Certification of CCNA 
(Cisco Certified | Network 
Associate), Switching Fund- 
amentals. TCP/IP, Routing 
Basics, WAN _ Technologies 
Wireless Technology, Operating 
and Configuring Cisco iOS 
Devices 


Please send your resume, refer- 
encing Job Order Number 
WEB367014 to the 

PA Dept. L & I 

235 Chelten Avenue 
Philadelphia, PA 19144 


Database Administrator At 
Quest Diagnostics Inc., we've 
become the nation’s most 
respected name in diagnostic 
testing by focusing on integrity 
innovation and quality. We've 
created an environment where 
dedicated professionals n 
learn, grow and advance - all in 
an atmosphere of pride. We're 
currently seeking a Database 
Administrator to be based in 
Lyndhurst, NJ. Candidate will 
install and maintain Oracle 8i/9i 
database and SQL Server data- 
base; support Oracle databases 
providing services to company 
users; assure data integrity and 
security; perform SQL Server 
administration; and monitor 
upgrade, and maintain UNIX 
servers. Requirements: Bach- 
elor's degree in Computer 
Science, Electronics, Engin- 
eering or related field; 5 years 
experience including impiemen- 
tation; maintenance, and sup- 
port programming of Oracle 
databases, systems administra- 
tion of UNIX servers running 
Oracle applications, and SQL 
Server database administration 
EOE/M/F/D/V. Please add 
source code: DBA1017 and for- 
ward your resume to 
Email:questdiag@alexus.com 
Fax 877-588-9942 or mail to 
Quest Diagnostics Incorporated 
P.O. Box 3597, Scranton, PA 
18505 


The MathWorks | 


The MathWorks |« 


25 MATLAB® 1 


Embedded Tools Developer 


DSP Simulink Blockset Engineer 


GUI Component Engineer 


DSP Software Engineer 


Product Developer 


The aforementioned positions are available at 
all levels and require a minimum of a B.S., 
M.S., or Ph.D. and 0-8 years’ experience. 


Additional Opportunities in the Following Areas: 
* Senior Installer Engineer 
* Senior Manager, Comp. Benefits, & HRIS 
* GUI Developer 

MATLAB- Senior Software Engineer 
* Siebel Analyst 
* Business Intelligence Analyst 
For fastest consideration interested 
candidates should reply via our website: 
http://www.mathworks.com/jobs 


Attn: Human Resources - Job Code: CW1003, 
The MathWorks, Three Apple Hill Drive, 
Natick, MA 01760-2098. 


Developers of MATLAB 


www.mathworks.com 


Systems Analyst (Financia E-Learning 
Manager 
development 


Work sites vary. System y- 
sis, design 
cial software full life cycle imple- 
mentation in SAP SEM BPS depth 
Customize transactional Info- Jemar 
Cube for SEM BPS simulation 

model, Planning Strategies 

Packages 
Perform Data Extracting from 


onfiguration finan- ¥ 
and support 


learning port 


Applications Systems and 
Trainin 
oO rporate 


LIS/LO data extraction, OLTP, ion s ail and 


legacy system, standard: instan essagir d syndi- 
tables and F files cated content includ News 
Customizing / enhancing Data 

Sources. Create and configure 

InfoSource, InfoObjects, Info- 

Cubes (BasicCube, MultiCube & 

Remote Cube), ODS. Data 

modeling and end-to-end cube 

development w/SAP BW 

objects. Design and develop 

Reports and Queries w/BEx 

Analyzer. BEx Explorer. posals, Requirem 

Collection of business metrics tions. o 
and extraction of KPI/Project t 
Client Mgmt. Implement ERP 
Solutions B.S. in Econ 
Financial Operations Mgmt, Info 
Systems, or similar + 1 yr exp 
SAP R/3 - SEM and SAP R/3 - 
BW. Travel req'd. Work sites 
vary. $68,000yr. Must have 
perm work auth. to work in U.S 
Refer to job order #web 368354 
Send resume to McKeesport F. Apply to: Ms. Cynthia Burton 
Career Link, ATTN: ES Convergent Media Systems 
Manager. 345 Sth Ave Corp., 3490 Piedmont Road 
McKeesport, PA 15132-2600 Suite 800, Atlanta, GA 30305 


De 
Test Plans 


standards 


progressive web-based soft 
ware engineering experience 
including at east 1 year 
Learning Management Systems. 
development experience 
AICC and SCORM sta 
Must be willing to travel 
nical consultant to client sites M- 
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SOFTWARE ENGINEER 
Design, development, enhance- 
ment, testing & support of lega- 
cy systems by providing guid- 
ance and system support based 
on customer needs and techni- 
al feasibility, Work performed 
using MS Projects, VISIO, MS 
Office applications Lotus 
Notices SOBOL (Common 
Business Oriented Language) 
cics stomer Information 
Control System) DB2 
Database 2), VSAM (File Aid 
Sequential Access 

J), Interest; Changeman 
esoive and Omegamon 
nplementing web applications 
ising Weblogic 5.3, Oracle, SQL 
(Structured Query Language) in 
UNIX environment. Must be 
willing to travel temporarily to 
client sites throughout the U.S 
with expenses paid by employer 
Exp. to include design, develop- 
ment, implementation & mainte- 
nance of software applications 
performed using MS Projects. 
VISIO. S Office applications 
Lotus Notices, COBOL, CICS 
DB2 VSAM Interest 
Changeman; Changesoive; and 
Weblogic 5.3 
Oracle, SQL in UNIX environ 


ment 


Omegamon 


Bachelo degree or foreign 
equiv. In Comp. Sci., Maths or 
yr 


exp in job offered or 1 yr in relat 


Engineering (any branch), 1 


ed occup, work as above but 
designated by another title is 
table Salary 
2/year. Hrs of work 

per week. Job and interview 
Boston, MA. Send this ad 

two (2) copies of your 
Case #200202905 

Exchange Ofc, 19 


niford St., 1st Fl., Boston, MA 


Internet Developer (Boston, MA) 
to design, develop & manage 
nternet/intranet applications 
infrastructure & security 
Troubleshoot & debug software 
code & monitor servers, applica- 
tion performance & user acces- 
sibility. Develop enhancements 
to pre-existing applications. Will 

ilize Java, HTML and web- 
based languages Require- 
ments: bachelor’s or equivalent 
in computer science or a related 
field; 4 years experience in the 
job offered or 4 years in systems 
analyst or related positions; and 
background in Java, HTML and 
web-based languages including 
experience using Java, JDB' 
JNDI, Javascript, UNIX, Java 
Web Server, HTML, PL/ SQL & 
SQL, Oracle and related tools to 
develop web-based applica- 
tions. Must have unrestricted 
authorization to work in U.S. M- 
F, 9:00 AM - 5:00 PM, 40+ hrs: 
week. Salary: $95,000/yr. Send 
two copies of resume to Case 
#20011 9, Labor Exchange 
Office, 19 Staniford Street, 1st 
Floor, Boston, MA 02114. An 
EOE 


ValleyUS, Inc seeks Prof- 
essionals with multiple open- 
ngs at Cupertino, CA / Sioux 
SD / Wilmington, DE/ Chicago. 
iL/Austin, TX and other project 
S out USA for the fol- 
owing position 


Software Engineer 

- Programmer analysts 
Project Manager 
Management Analyst 


Salary will be commensurate 
with education and experience 
All positions involve travel or 
relocating to various client sites 
through out USA. Apply with 
your resume to 


Valley US Inc 

H.R. Executive 

10062 Miller Avenue, #270 
Cupertino, CA 95014 


Please indicate the location and 
position you are applying for. 


IT|Careers 


Software Test Engineer (Fort 
Worth, TX). Bachelor's degree 
(or equiv. foreign educ.) in com- 
puter science, info. tech. or 
mathematics & 6 yrs.’ exp. in the 
job offered or 6 yrs.' exp. con- 
ceptualizing, writing & imple- 
menting software test methodol- 
ogy & the direct use of software 
test toois, both of which comply 
with regulated industry stan- 
dards. [In lieu of Bachelor's 
degree, will accept 2 yrs. of uni- 
versity study in comp. sci., info. 
tech. or mathematics & 2 add'l 
yrs. of exp. as stated] Stated 
exp. must include working with 
the entire information systems 
test life cycle’ and hands on 
testing of multi-tier information 
systems. Must also have 1 yr.'s 
exp. managing multi-tier infor- 
matior systems projects 
Conceptualize, write and imple 
ment software test methodology 
& use software test tools to 
ensure reduction of business & 
technical costs & correlation with 
corporate standards for risk- 
based compliance Work on 
entire information tems test 
life cycle* (test planning, con- 
duct, analysis, documentation, & 
reporting, & corrective action 
tracking and re-testing) 
40hrs./wk. 8:00 a.m.-5:00 p.m 
with resume to: Sylvia 

Alcon Laboratories, Inc. 

S. Freeway, Mailstop IL- 

Fort Worth, TX 76134. EOE 


Software Engineer. Three open- 
ings. Develop software follow- 
ng RUP methodology; con- 
tribute to ongoing design efforts 
with recommendations to the 
product development on area of 
expertise; work with other team 
members and Project Leads to 
ensure smooth integration and 
product releases. Must have 
Bachelor's degree in Computer 
Science or related field, one 
year experience and experi- 
ence must include working with 
multiple database platforms 
Rational Rose, Java and related 
technologies including J2EE 
JNDI, JMS, JAAS, and utilizing 
JUnit with iterative development 
Must have implementation 
knowledge of multiple applica- 
tion servers such as WebLogic. 
WebSphere or Tomcat. Send 
resume w/ cover letter to Praxis 
Technology Group, LLC, Attn 
Darcy Bedford, 1500 NW 118th 
St., Des Moines, IA 50325 


Keytone Technologies 
Inc. is hiring a VP of 
Delivery/Engineering. 
Send resumes to 3140 
De La Cruz Blvd, Suite 
200, Santa Clara, CA 


95054. Travel req- 


uired 


IT professionals needed for 
analysis and design of systems 
solutions across multiple techni- 
cal and business environments 
for leading insurance company 
based in Chattanooga, TN 
Requires 2 years experience 
involving SQL Server, ASP, 
Crystal Reports, Visual Basic 
and COM+. All positions req 
BA/BS and 2 yrs. exp. in field 
EOE. Send resumes to Ms. 
Lois Judge, Sr. Recruiter, at 
UnumProvident, 2211 Congress 
St. Q291, Portland ME 04122 
Include Ref. #2015602 
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NEER to design, develop, test. 
impiement and maintain appli- 
cation software using C#.NET. 
ASP.NET, BizTalk Xlang, XML. 
HTML, DHTML, COM/DCOM 
JavaScript, ActiveX Controls 
Visual C++, SQL Server, MS 
Project, MS Visio and Mercury 
Interactive Test Director under 
UNIX and Windows operating 
systems; Mentor junior engi- 
neers and programmers 
Require: B.S. degree in Comp- 
uter Science, an Engineering 
discipline, or a closely related 
field with 5 yrs of progressively 
responsible exp. in the job 
offered or as a Programmer 
Analyst or Programmer 
Extensive travel on assignment 
to various client sites within the 
U.S. is required. Competitive 
salary offered. Send resume to 
Edward Mojewski Rd., Softech 
Development, Inc., 3057 Lorna 
Road, Ste., 108, Hoover, AL 
35216; Attn: Job RT. 


Internet Developer (Boston, MA) 
to design, develop & manage 
internet/intranet applications 
infrastructure & security. 
Troubleshoot & debug software 
code & monitor servers, applica- 
tion performance & user acces- 
sibility. Develop enhancements 
to pre-existing applications. Will 
utilize Java, HTML and web- 
based languages Require 
ments: bachelor's or equivalent 
in computer science or a related 
field; 4 years experience in the 
job offered or 4 years in systems 
analyst or related positions; and 
background in Java and web- 
based language including 
experience developing web- 
based applications with Java 
and related tools such as Corba 
Oracle, UML (Rational Rose) 
and DB2, WebSphere applica- 
tion server and IBM and /Planet 
web server. Must have unre- 
stricted authorization to work in 
U.S. M-F, 9:00AM-5:00PM, 40+ 
hrs/week. Salary: $110,000/yr. 
Send two copies of resume to 
Case #200115037 Labor 
Exchange Office, 19 Staniford 
Street, 1st Floor, Boston, MA 
02114. An EOE 


Internet Developer (Boston, MA) 
to design, develop & manage 
internet/intranet applications 
infrastructure & security 
Troubleshoot & debug software 
code & monitor servers, applica- 
tion performance & user acces- 
sibility. Develop enhancements 
to pre-existing applications. Will 
utilize Java, HTML and web- 
based languages Require. 
ments: bachelor's or equivalent 

omputer sci e or a related 
field; 4 years experience in the 
job or 4 years in systems analyst 
or related positions; background 
in Java, HTML and web-based 
languages including cross plat- 
form (UNIX and Windows) expe- 
rience developing web-based 
applications with Java and reiat 
ed tools, C, C++, XML, Rationa 
Rose, MS-SQL and Corba 
Must have unrestricted autho: 
rization to work in U.S. M-F 
9:00 AM - 5:00 PM, 40+ hrs: 
week Salary $120,000/yr 
Send two copies of resume to 
Case #200115036 Labor 
Exchange Office, 19 Staniford 
Street, 1st Floor, Boston, MA 
02114. An EOE 


Computer Information Tech 
nology (IT) Services Manager 
To provide expertise to our 
clients in Mac OS X and 
FreeBSD Unix, including XML 
Perl, PHP languages and 
emerging new media and IP 
technologies. Send resume to 
Executive International, REF 
CIT, P O Box 1437, Thousand 


Oaks, CA 91358 


Laeetactosesmereye a) 


Software engineer to design, 
develop and implement Wide 
Data Warehouse and EIS appli- 
cations using SAS tools on Unix. 
Linux and NT platforms 
Design logical data ware- 
house/data mart model and 
define processes to connect 
data sources Design and 
develop the proce: for data 
extraction from different data 
sources. Define the rules and 
routines for automating the data 
loading process Perform 
duties utilizing SAS/BASE 
SAS/SQL, SAS/MACROS, SAS. 
ACCESS SAS/CONNECT 
SAS/ODS SAS/WEBEIS 
Masters Degree in Computer 
Science and three years experi- 
ence. Bellsoft Inc. 8770 W 
Bryn Mawr Ave., Suite 1300. 
Chicago, IL 60631 


Senior 
Programmer Analysts 


We are looking for experienced 
programmers with the following 
skills: at least 2 years experi- 
ence with Microsoft VBscript 
HTML, Active X, Jscript and 
ASP/Il, SQL Server, Crystal 
Reports, PL/SQL and Loan- 
Quest mandatory. A degree in 
Computer Science or Infor- 
mation Technology is required 
Must have excellent communi- 
cation skills, both verbal and 
written. Excellent technical peer 
group to work with. Some travel 
may be required. For consider- 
ation, please fax your resume to 
(904) 356-1099 or e-mail to 
hr@MortgageFlex.com NO 
THIRD PARTY. For further info 
go to www.mortgageflex.com 
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NEWS 


Big IT Cost Reductions Likely in 
Bank of America Acquisition Deal 


Analysts expect IT workforce layoffs 





BY THOMAS HOFFMAN 
Bank of America Corp. and 
FleetBoston Financial Corp. 
said they will try to minimize 
layoffs as part of the merger 
deal the two companies an- 
nounced last week. But ana- 
lysts say it will be nearly im- 
possible for the banks to hit a 
$1.1 billion annual cost savings 
target without significant cut- 
backs in areas such as IT. 

Even if IT staffing cuts are 
kept to a minimum, reductions 
in technology expenditures are 
expected to play a big part in 
the cost-savings effort. During 
a conference call with analysts, 
Bank of America executives in- 
cluded consolidation of redun- 
dant systems and software li- 
censes among steps they plan 
to take to make the combined 
bank more efficient, said Jim 
Eckenrode, an analyst at Tow- 
erGroup in Needham, Mass. 

But Eckenrode said he be- 
lieves that layoffs are almost 
inevitable in administrative 
and back-office functions, in- 
cluding IT. “They’re not going 
to take a billion dollars out of 
the organization without re- 
ducing head count,” he said. 

“We understand what they 
have to say for political rea- 
sons,” said Gerard Cassidy, an 
analyst at RBC Capital Mar- 
kets, a New York-based invest- 
ment bank. But the No. | oper- 
ating cost for banks is person- 
nel, Cassidy noted. 

The total number of jobs at 
the two companies might not 
change much because of a pre- 
viously disclosed plan by Bank 
of America to add about 550 
branches nationwide over the 
next three years, Cassidy said. 
But he added that once the op- 
erations of the banks are fully 
integrated, “they'll certainly 
have redundancies in informa- 
tion management.” 
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Bank of America, which is 


| already the second-largest 
| bank in the U.S., plans to buy 


Boston-based FleetBoston in a 
stock-swap deal valued at 


| about $43 billion. A spokes- 
| woman for Charlotte, N.C.- 

| based Bank of America said 
| it’s too soon to say what im- 


pact the planned merger will 


| have on different types of po- 
| sitions at the companies. 


The spokeswoman added 
that bank executives should be 
closer to laying out a technolo- 
gy integration road map when 


| the merger nears its scheduled 


Continued from page 1 


Life-cycle Tools 


What Medeiros really needs 
is wider interoperability be- 


| tween rival products to make a 
planned storage management 
consolidation project possible. 


Medeiros, who manages 


| 300TB of storage capacity at a 
| data center in New Jersey, said 
| he wants to tie in an additional 


400TB that’s spread among 


Tech Plans 


EMC said that during next 
year’s first quarter, it will intro- 
duce software that can be used to 
tie database applications into the 
data backup process. 


HITACHI DATA SYSTEMS an- 
nounced a deal to resell AppiQ 
Inc.’s StorageAuthority Suite 
software, which manages multi- 
vendor storage resources. 


VERITAS SOFTWARE tomor- 
row plans to launch Data Life- 
cycle Manager 5.0, which can 
move data to secondary and 
archival storage systems based 
on the information's age. 
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completion in mid-2004. Bank 
of America officials are peg- 
ging a late 2005 deadline for 
finishing the integration of the 
companies, she said. 
Eckenrode and Bill Bradway, 


in Framingham, Mass., both 
said there’s little overlap in the 
banks’ IT systems. However, 
both Bank of America and 
FleetBoston use a customer 
information system from 
Hogan Systems Inc. in Dallas 


| and a consumer-loan origina- 


tion system developed by 


| American Management Sys- 
| tems Inc. in Fairfax, Va. 


Although both Bank of 


1,500 UPS offices worldwide. 

Information life-cycle man- 
agement was one of the most 
talked-about topics at last 
week’s conference, which was 
co-sponsored by Computer- 
world and the San Francisco- 
based Storage Networking In- 
dustry Association and drew 
more than 2,600 attendees. 

During one packed session, 
11% of the audience indicated 
via electronic polling devices 
that they have already in- 
stalled information life-cycle 
management components. 
Thirty-three percent said they 
plan to begin deployments in 
the next 12 months, and anoth- 
er 30% said they would do so 
within two years. 

Top storage vendors such as 
EMC Corp., Hewlett-Packard 
Co., Hitachi Data Systems 
Corp. and Veritas Software 
Corp. have announced infor- 
mation life-cycle management 
software or have said they’re 
developing technology that’s 
designed to support automat- 
ed storage management ap- 
proaches (see box). 

But Steve Duplessie, an ana- 
lyst at The Enterprise Storage 
Group Inc. in Milford, Mass., 
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America and FleetBoston have 
engaged in offshore applica- 
tion maintenance, each has a 
history of proprietary applica- 
tion development, “and I don’t 
see that changing anytime 
soon,” Eckenrode said. 

But Bradway said that as sys- 
tems consolidation and con- 
version work proceeds, the 
need to retain two application 


| development and maintenance 
an analyst at Financial Insights | 


| 
| 
| 


teams will be reduced. 


Total assets 

Annual IT spending 
Top IT executive 
Number of IT workers 


| said information life-cycle 
| management currently is little 


more than marketing jargon 

without real products to back 

up the promises of vendors. 
Mark Lewis, EMC’s chief 


| technology officer, acknowl- 


edged that the technology is 


| still in the early stages of de- 


velopment. “We don’t think 
anyone is doing it well,” he 


said during a press briefing. 


“We don’t think we’re doing it 
well, at least not yet.” 

First Data Corp. in Green- 
wood Village, Colo., is one 
convert. Jerome Wendt, a se- 
nior storage analyst at First 
Data, said he’s already plan- 
ning the payment-processing 
company’s information life- 
cycle management strategy, 
which will include the use of 
storage virtualization software 
that can pool disk capacity on 


storage-area networks (SAN). 


Wendt is also testing tools 
from EMC, Veritas and Fujitsu 
Software Technology Corp. 
that he hopes will give him 
better data about the usage of 
storage capacity on servers 
and disk arrays than his exist- 
ing spreadsheet models. 

Automated storage manage- 
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Bank of America said Eu- 
gene McQuade, FleetBoston’s 
president, will hold a similar 
job at the combined company 
and will have overall responsi- 
bility for IT. But the spokes- 
woman said a CIO probably 
won't be chosen until mid- 
2004. Tim Arnoult is the top 
IT executive at Bank of Amer- 
ica, and Joseph Smialowski is 
his counterpart at FleetBos- 
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ment systems would ease 
headaches for IT managers 
charged with destroying old 
data that no longer has to be 
kept to satisfy government 

regulators, Wendt said. As 
part of his plan, Wendt is clas- 
sifying First Data’s informa- 
tion to specify the storage me- 
dia to be used for different 
data during its life cycle. 

First Data also plans to de- 
ploy several tiers of storage, 
including arrays with low-cost 
disks that can provide sec- 
ondary repositories for near- 
line storage. “By doing that, 
you free up space on [your pri- 
mary] storage for mission-crit- 
ical databases,” Wendt said. 

But for many other users, 
information life-cycle manage- 
ment implementations won’t 
happen anytime soon. 

Jerry McElhatton, senior ex- 
ecutive vice president of glob- 
al technology and operations 
at MasterCard International 
Inc. in Purchase, N-Y., had a 
blunt message for vendors. 
“Come back to us when you 
have something meaningful 
that will serve a business need 
and demonstrate a purpose,” 


he said. @ 42478 
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Businessy IT’ 


READER WRITES: “I am tired of reading about my job 
possibly moving overseas! When are you going to write 
about how American IT workers can best prepare for 


that inevitability? What IT jobs will be available for U.S. 


workers? What are we IT people supposed to do — be- 
come dogcatchers? A humane occupation, but I did not go college to 
do that! I want to know, specifically, what kinds of jobs will be left 
after the outsourcing craze, and where will they be?” 
What kinds of jobs will be left? Business, not bits. 
And where will they be? Everywhere there’s business. 


Sure, that’s an oversimplification. But if you 
boil down everything that’s happened in IT 
over the past few years, this is it: Anything in IT 
that doesn’t directly engage the business your 
company is in is unlikely to survive. 

That includes pure programming. And pure 
network management. And pure machine oper- 
ation. And every other IT-shop job that’s pure 
technology. 

In fact, any job that’s exactly the same in 
every IT shop is a candidate for outsourcing. 

OK, slice away that IT work. What’s left? 

All the jobs that aren’t pure IT. The “busi- 
nessy” IT jobs. The ones that require meeting 
with users. And listening to users. And under- 
standing users — and the business. 

Sometimes those jobs have the same names 
as the pure-IT jobs. But we all know the differ- 
ence. When a programmer/analyst turns re- 
quirements into code, that’s pure IT. But when a 
programmer/analyst manages to tease out re- 
quirements from users that they weren’t able to 
articulate, that’s not pure IT. It’s a little listen- 
ing, a little psychology, a little sweet-talking, a 
little imagineering — and, of course, a lot of IT 
understanding. 

When a systems or network ad- 
ministrator calculates capacity and 
optimizes how the servers and net- 
works run, that’s pure IT. But when 
someone with the same title locates 
and clears a recurring trouble spot 
for salespeople or looks ahead to 
avoid a holiday order-fulfillment 
bottleneck, that’s using IT to make 
the business work better. 


customers’ pockets — well, that’s what business 
is all about. 

The big difference isn’t in how technical the 
jobs will be. No business needs an IT depart- 
ment that’s dumbed down. Businesses need IT 
shops that are just as smart about technology — 
and a lot smarter about business and users. 

In other words, we have to think like IT peo- 
ple and users. 

That may be the single hardest thing for 
many IT people to accept. For those of us who 
define ourselves in terms of technology, users 
are the “them” to our “us.” We take pride in the 
fact that we're different from users. 

But in the future, what will get us jobs is the 
fact that we’re like them. And we understand 
them. And we can help them stay focused on 
business. 

Of course, you probably didn’t go to college 
for business any more than you did for dog- 
catching. You went for technology, right? So you 
face a choice. The edge your education gave 
you is no longer enough. Offshore program- 
mers and techs have educations that are just as 
good, but they’ve got a lower cost structure. 
When it comes to bits, you’ve been underbid. 

So you can either resign yourself 
to being another IT commodity — 
or raise your value by becoming a 
businessy IT person. 

Doing that will mean work. And 
change. And new ideas. You won't 
be as good at it as you’ve become at 
pure IT, at least not at first. But if 
you can do it, you won’t just keep 
your job. You'll gain a whole new 
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Sign of a True Professional 


High-priced management consultants need some in- 
formation at this hospital, so they ask IT pilot fish to 
tun reports and watch as he signs onto the 30-year- 
old system through a PC terminal emulator. “But I've 
worked with this system for almost 10 years and go 
through the menus rapidly, printing off the information 
they asked for,” fish says. One consultant comments 
approvingly that fish has worked for five minutes and 
never touched the mouse - the sign of a true profes- 
sional. Fish chuckles. “| didn’t tell them that the sys- 
tem was so old it didn't recognize the mouse.” 


Oops! 
Urgent call 


comes to IT pi- 


SHARK 


Not the 
Right 


lot fish from this TANK wy. It’s the 1980s, 


user, who says 
his printer “just ; 
stopped.” “I couldn't fig- : 
ure how it ever worked,” 
fish says. “It had no 

printer drivers for that 
network printer.” Turns 
out user wanted to stop 
printing a large file, so 
he decided to delete the 
job. “I reinstalled the i 
printer driver,” says fish, : 
“but when | explained to 
him that it doesn’t work 
too well if you delete the 
driver while it’s printing, 
he just left the room.” 


and senior ex- 


: ecs throw a meet-and- 


greet session for em- 


computer companies 
i was very unusual,” says 
: IT pilot fish, “since the 
: perious a group as you 
: could ever imagine.” 


Fish recognizes the 


? chairman and CEO and 
: “We do systems man- 
: agement in corporate 
: operations IT,” fish ex- 


: plains. Big cheese hesi- 


None of the Above 


: tates a moment, then 


: asks, “What is IT?” 


: Of the Internet 

: Electricity to this uni- 

; be shut down while elec- 
? fines outside. One grad- 
: uate student asks pilot 
: fish for a flashlight so 
: ing on her laptop in her 
: office. You'll need to 

: run on your laptop’s 

: batteries while the 

: power is off, fish ex- 

: I don’t need power,” 

: she tells him. “I use 


When a support tech answers a 
technical question, that’s pure IT. 
When that tech removes a problem 
or a glitch that’s interfering with a 
user’s ability to extract money from 


FRANK HAYES, Computer- 
world's senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 

frank_hayes@computerworld.com. 


understanding of how technology 
works in a business. 

After all, it really isn’t “business, 
not bits.” 

It’s business and bits. @ 42467 





cS FEED THE SHARK! Send your true tales of IT life to 
.com. You snag a snazzy 
Shark shirt if we use it. And check out the daily feed, browse 
the Sharkives and sign up for Shark Tank home delivery at 
computerworld.com/sharky. 
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Fortunately you have the most manageable 
video conferencing systems in the world. 


With IT resources scarcer than ever, you need Polycom’s integrated video conferencing 
systems. They're user friendly, easy to upgrade, manage and maintain. Deployment is 
virtually “plug and play.” And, monitoring and management is centralized. It all adds up 
to a great ROI for your team and your company. Join the millions of people worldwide that 
already use Polycom and The Polycom Office.’ With integrated video, voice, data, and 
Web applications, The Polycom Office makes communicating as natural as being there. 
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VSX" 7000 — video conferencing like you've never seen it. Polycom. The time for 
manageable video conferencing is now. 
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